You can integrate Jamf Pro with trusted third-party CAs, including Active Directory Certificate Services (AD CS), DigiCert, or Venafi. These integrations allow an organization to have a CA that controls all of the identity certificates across all devices. Using a third-party CA will allow for unified reporting on all certificates for IT teams.
Some time may be required between certificate request and certificate delivery since those processes are handled asynchronously. After receiving a certificate request, Jamf Pro will distribute certificates to devices the next time they check in with Jamf Pro or when the next MDM command is sent and the devices are ready to accept the certificate.
- AD CS —
After communication with the PKI provider is successfully established, you can deploy certificates via configuration profiles using AD CS as the CA. You can also distribute in-house apps developed with the Jamf Certificate SDK to establish identities to support certificate-based authentication to perform Single Sign-On (SSO) or other actions specific to your environment. For more information, see the Integrating with Active Directory Certificate Services (AD CS) Using Jamf Pro technical paper.
- DigiCert —
DigiCert certificates are managed in Jamf Pro using the DigiCert PKI Platform service. After communication between Jamf Pro and the DigiCert PKI Platform is established, you can deploy certificates to computers or mobile devices. For more information, see the Integrating with DigiCert Using Jamf Pro technical paper.
- Venafi —
Venafi certificates are managed in Jamf Pro using Venafi Trust Protection Platform. After communication between Jamf Pro and Venafi Trust Protection Platform is established, you can deploy certificates to computers or mobile devices. For more information, see the Integrating with Venafi Using Jamf Pro technical paper.