The default configuration for XenMobile is user name and password authentication. To add another layer of security for enrollment and access to XenMobile environment, consider using certificate-based authentication.
Objective The primary intent of this article is to provide steps on how an admin can enable certificate based authentication for XenMobile in Cloud.
I discussed with my friend Henry (@hereshenry) about the fact that on XenMobile configured with CBA (Certificate Based Authentication) we saw on the PKI that multiple certificates was issued for same users.
When you configure CBA (Certificate Based Authentication), you can receive the following error: “The configuration does not support client certificate authentication. Contact your helpdesk for additional information” when enrolling iOS devices. Here after the solution:
Certificate authentication is available for XenMobile MAM-only mode. Certificate authentication isn’t available for XenMobile ENT mode when users enroll in the legacy MAM mode. For more information about MAM-only mode, see New MAM-only mode.
As I got issue with one customer today working on XenMobile with CBA (Certificate Based Authentication) and HDX Apps access inside Secure Hub, I just want to share my experience here after.
As I was asked by a customer to implement XenMobile with 2 Factor Enrollment and CBA and it’s not so simple ;), here after the steps:
On the process to implement CBA (Certificate Based Authentication) on XenMobile for a customer, we got issue: unable to enroll with CBA on XMS 10.4.1 with iOS devices.