The Secure Channel Certificate settings page lets you configure options related to the certificate of the same name.

What can you do with Workspace ONE UEM Secure Channel Certificate Settings

To access the Secure Channel Certificate Settings navigate to Groups & Settings > All Settings > System > Advanced > Secure Channel Certificate.

  • Block non-secure channel device access
  • Download Secure Channel Certificate Installer for Windows
  • Download Secure Channel Certificate Installer for Linux

Determine your Organization group hierarchy

Before you review and modify the settings, understand the two types of inheritance/override options for the organization group hierarchy available at the top and bottom of the settings page and determine your choice. For more information about these settings, see Override Versus Inherit Setting for Organization Groups.
  • Current Setting – Select whether to Inherit or Override the displayed settings. Inherit means use the settings of the current organization group's parent OG, while Override enables the settings for editing so you can modify the current OG's settings directly.
  • Child Permission – Select the available behavior of child organization groups that exist below the currently selected organization group. Inherit only means child OGs are only allowed to inherit these settings. Override only means they override the settings, and Inherit or Override means you can choose to inherit or override settings in child OGs that exist below the currently selected OG.

For on-premises customers, the Secure Channel Certificate establishes a trust between Workspace ONE UEM and any components (e.g. VMware Enterprise Systems Connector, AWCM) that are installed on premises. VMware Enterprise Systems Connector automatically packages this certificate in its installer, but for AWCM you will need to download it from here.

Block Non-Secure Channel Device Access

Select a check box next to each of the platforms with which you want to enforce communication with the Workspace ONE UEM console over a secure channel.

AirWatch Cloud Messaging

Download AWCM Secure Channel Certificate Installer – Downloads an .exe file that you can run on your AWCM server.

Download CNS Secure Channel Certificate Installer – Downloads a .tar file that you can run on your Cloud Notification Service server. The Secure Channel Installer for Linux is only used for the Cloud Notification Service. AWCM is only supported on Windows servers.