If you will use Certificate Enrollment Gateway with an on-premises Security Manager CA for MDM Web Service (MDMWS) enrollment, you must configure Security Manager as described in the following sections. For detailed information about configuring Security Manager, see the Security Manager documentation.

• Configuring Security Manager to allow server-generated keys for MDMWS enrollment
• Creating a client policy and role for MDMWS P12 enrollments
• Adding certificate types to Security Manager for MDMWS P12 enrollment
• Creating certificate definition policies for MDMWS P12 certificate types
• Mapping certificate definition policies to the MDMWS P12 certificate types