Jamf Pro allows you to add Active Directory Certificate Services (AD CS) as a PKI Provider in Jamf Pro. This allows you to use AD CS as the certificate authority (CA) for distributing certificates to computers and mobile devices via configuration profiles.

Adding AD CS as a PKI Provider for certificate distribution involves the following steps:

1. Install the Jamf AD CS Connector
   The Jamf AD CS Connector is a service that allows Jamf Pro to securely communicate with the AD CS certificate authority server.

2. Integrate Jamf Pro with AD CS
   Integrating with AD CS involves configuring settings in Jamf Pro to define the location of the CA server for Jamf Pro. In addition, you can use Jamf Pro to configure settings for the Jamf AD CS Connector to establish secure communication between Jamf Pro and AD CS.

After communication between Jamf Pro and AD CS has been established, you can use the following technologies in Jamf Pro for certificate management:

• Configuration Profiles—Jamf Pro allows you to distribute certificates via configuration profiles using AD CS as the CA.

• In-house Apps—You can distribute in-house apps developed with the Jamf Certificate SDK to establish identities to support certificate-based authentication to perform Single Sign-On (SSO) or other actions specific to your environment. Jamf Pro allows you to apply a Managed App Configuration to the app during distribution to enable the app to request the necessary certificates.