MANAGEMENT OF CERTIFICATES FOR MOBILE DEVICES

摘要

One embodiment of the present disclosure provides a method that includes accessing, by a mobile device management system, a profile for a mobile device. The method also includes negotiating, by the mobile device management system, with a certificate authority to obtain a certificate for the mobile device. The negotiating with the certificate authority includes imitating the mobile device based on the profile. The negotiating with the certificate authority also includes, based at least on the imitation, transmitting one or more certificate enrollment messages to the certificate authority. The negotiating with the certificate authority further includes, based on the one or more messages, receiving, at the mobile device management system, the certificate for the mobile device. The method further includes transmitting the certificate to a control agent hosted on the mobile device for installation.

主权项

1. A system, comprising:
a mobile device management system that includes one or more processors; and a memory coupled to the processors and tangibly storing one or more instructions, the one or more processors operable when executing the one or more instructions to:
monitor a data object associated with a mobile device for one or more changes;determine, based at least in part on the one or more changes, that the mobile device is not authorized to have a certificate; andrevoke the certificate based at least in part on the determination that the mobile device is not authorized.