When VMware Identity Manager is enabled in Workspace ONE UEM, you can generate the Workspace ONE UEM issuer root certificate and export the certificate for use with the Mobile SSO for iOS authentication on managed iOS 9 mobile devices.


  1. In the Workspace ONE UEM console, navigate to System > Enterprise Integration > VMware Identity Manager.
    To enable Workspace ONE UEM Certificate Authority, the organization group type must be Customer.
    Tip: To view or change the group type, navigate to Groups & Settings, Groups > Organization Groups> Organization Group Details.
  2. Click Configuration.
  3. In the CERTIFICATE section, click Enable.
    The page displays the issuer root certificate details.
  4. Click Export and save the file.

What to do next

In the VMware Identity Manager console, configure Kerberos Authentication in the built-in identity provider and add the certificate authority issuer certificate.