How to check DS certificate on an enrolled device ?

How to check DS certificate on an enrolled device ?

SH
steve halsberghe

Hello

 

Is there a way to check which certificate (DS) a device using ?

I enrolled multiple devices using SHA1, then SOTI installed SHA2 (to support Android 10).

Now I need to attach the new SHA2 certificate to Deployment server but I need first to double check that SHA2 certificate has been learned by all devices.

 

Is there a way to do that "easliy" ?

 

steve

...Show More

5 Answers

Order By:   Standard | Newest | Votes
DDMOD@SOTI | posted this 03 June 2020

Hi Steve,

 

If you only have android devices on the console and all those devices have come online/performed check-in anytime after the certificate is pushed, then those devices would have learnt about the new SHA2 certificate generated on the server. 

You can proceed with the SHA2 binding.

 

Note: It is recommended to have a Server snapshot before binding the SHA2 certificate.

 

Regards,

Technical Support | SOTI Inc. |+1-888-494-SOTI (7684) | support@soti.net | www.soti.net |

  • 0
  • 0
  • 0
  • 0
steve halsberghe | posted this 03 June 2020

Hi

 

Devices are ANDROID 9

They came online.

Certificate is not shown on SECURITY screen but is present on  device (I cehck with settings export from device)

 

steve

  • 0
  • 0
  • 0
  • 0
DDMOD@SOTI | posted this 03 June 2020

Hi Steve,

 

Are those devices on android platform? If so, did they come online/performed check-in anytime after the certificate is pushed?

Please confirm.

 

Regards,

Technical Support | SOTI Inc. |+1-888-494-SOTI (7684) | support@soti.net | www.soti.net |

  • 0
  • 0
  • 0
  • 0
steve halsberghe | posted this 03 June 2020

Thx for answer.

SHA2 certificate has been added by soti support 9 days ago... But no device shows 2 certificates in console !

 

Does it mean that certificate has not been learned by any device ? 

Or do i have to double check in any other place  or logs ?

 

 

thx.

 

  • 0
  • 0
  • 0
  • 0
DDMOD@SOTI | posted this 29 May 2020

Hi Steve,

 

Thanks for the interesting post!

If you had only Android devices on the web-console, once they check-in they automatically store the certificate on the device and learn the new certificate. You can see for yourself on the MobiControl web-console:

Click on any android device and select the Security tab 

Every android device on your web-console should have 2 certificates(SHA1 and SHA2) and you can confirm them via thumbprint available.

You can search the web-console for what devices have not checked in after the SHA2 certificate was generated to identify the devices that have not learned the new certificate,
With android devices once they check-in they automatically store the certificate on the mobicontrol agent and learn the new certificate. With apple devices you need to push the certificate to the devices in a profile. 

 

Regards,

Technical Support | SOTI Inc. |+1-888-494-SOTI (7684) | support@soti.net | www.soti.net |

  • 0
  • 0
  • 0
  • 0

Give us your feedback
Give us your feedback
Feedback