This diagram shows how certificate authentication is handled from the point where the user’s device enrolls into Workspace ONE UEM to when the user has VPN access to the protected enterprise network.

Certs_Cisco_IPSec1