When Workspace ONE Access is enabled in Workspace ONE UEM, you can generate the Workspace ONE UEM issuer root certificate and export the certificate for use with the Mobile SSO for iOS authentication on managed iOS 9 or later mobile devices.


  1. In the Workspace ONE UEM console, navigate to System > Enterprise Integration > Workspace ONE Access.
    To enable Workspace ONE UEM Certificate Authority, the organization group type must be Customer.
    Tip: To view or change the group type, navigate to Groups & Settings, Groups > Organization Groups> Organization Group Details.
  2. Click Configuration.
  3. In the CERTIFICATE section, click Enable.
    The page displays the issuer root certificate details.
  4. Click Export and save the file.

What to do next

In the Workspace ONE Access console, configure Kerberos Authentication in the built-in identity provider and add the certificate authority issuer certificate.