Now that you have configured GlobalSign certificate authority, Workspace ONE UEM is able to communicate with GlobalSign. The next step is to define which certificate will be deployed to devices by setting up a certificate template in Workspace ONE UEM.
- Navigate to Devices > Certificates > Certificate Authorities.
- Select the Request Templates tab.
- Click Add.
- Select GlobalSign from the Certificate Authority drop-down menu.
- Enter the Name for the GlobalSign Request Template.
- Enter a Description to help you identify the GlobalSign certificate template.
- Enter the Profile ID, which corresponds to the GlobalSign profile identity bound to the certificate.
- Enter the Product Code, which is the code bound to the certificate/template/license.
- Select the Validity Period in years, which is the time period the certificate/template/license will be valid.
- Enter the Subject Name, which may be comprised of a maximum of one CN and up to three OUs.
Under SAN Type, select Add to include one or more Subject Alternate Names with the template. This is used for additional unique certificate identification. In most cases, this needs to match the certificate template on the server. Use the drop-down menu to select the SAN Type and enter the subject alternate name in the corresponding data entry field. Each field supports lookup values. Email Address, User Principal Name, and DNS Name are supported by GlobalSign templates by default, and Workspace ONE UEM recommends that you use them.
- Select the Automatic Certificate Renewal checkbox if Workspace ONE UEM is going to automatically request the certificate to be renewed by GlobalSign when it expires. If you select this option, enter the number of days prior to expiration before Workspace ONE UEM automatically requests GlobalSign to reissue the certificate in the Auto Renewal Period (days) field. This requires the certificate profile on GlobalSign to have the Duplicated Certificates setting enabled.
- Select the Enable Certificate Revocation checkbox if you want Workspace ONE UEM to be able to revoke certificates.
- Click Save.