This diagram shows how certificate authentication is handled from the point where the user’s device enrolls into AirWatch to when the user has VPN access to the protected enterprise network.

Certs_Cisco_IPSec1