---
title: Adding a profile
slug: access-guide/adding-a-profile
docTags: 
createdAt: 2026-10-09T06:41:05.675Z
---

If you selected Ivanti Access + Standalone Sentry, the Add Profile screen appears. Use the Profile page to create a profile for Ivanti Access and set up Ivanti Access + Standalone Sentry.

**Prerequisites **

- The certificate must be signed by a trusted third-party CA, and must have its associated private key as part of the PKCS 12 file.
- The certificate must comply with security requirements. See Error conditions for SSL certificate. For more information about error conditions, see [Adding a profile ](docId:0r1MnuWPBEEGJUPcJwwQ8). If the SSL certificate does not comply with the security requirements, then the following error displays.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/4PtCD7t-89Y_TufdrxyS9_addsslios13error.png" size="57" isUploading="false" initialPath="../Resources/Images/AddSSLiOS13_Error.png" githubPath="Resources/Images/AddSSLiOS13_Error.png" width="571" height="477" darkWidth="571" darkHeight="477" showCaption="false"}

- Associate the SSL certificate with the Sentry second hostname.

**Procedure **

1. For <font color="#323232">Hostname</font>, enter the second hostname for the Standalone Sentry.

:::Paragraph{indent="1"}
The second hostname will be associated with Ivanti Access.
:::

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/tLFRAUA8OJUWnV8H1IDGP_setuphostnamecertr29.png" position="flex-start" size="100" width="754" height="306" initialPath="../Resources/Images/SetupHostnameCertR29.png" githubPath="Resources/Images/SetupHostnameCertR29.png" darkWidth="754" darkHeight="306" showCaption="false" indent="1"}

2. Click on <font color="#323232">Next.</font>

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/399KfOEVBWuz_nCU5VeGh_setupaddcertr29.png" size="76" isUploading="false" initialPath="../Resources/Images/SetupAddCertR29.png" githubPath="Resources/Images/SetupAddCertR29.png" width="764" height="333" darkWidth="764" darkHeight="333" showCaption="false"}

3. Click <font color="#323232">Add new certificate</font> to upload the SSL certificate associated with the second hostname.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/y8T2UmqGx6FiFRkkjhNlK_setupaddcertfieldsr15.png" size="66" isUploading="false" initialPath="../Resources/Images/setupAddCertFieldsR15.png" githubPath="Resources/Images/setupAddCertFieldsR15.png" width="661" height="545" darkWidth="661" darkHeight="545" showCaption="false"}

4. For <font color="#323232">Certificate Name</font>, enter a name by which you can identify the certificate.
5. For <font color="#323232">Certificate Password</font>, enter the password required to open the certificate.
6. Click <font color="#323232">Choose File </font>to navigate to the location of the certificate file or drag and drop the certificate file.
7. Click <font color="#323232">Add SSL Certificate</font> to complete the process of adding the certificate.
8. Click <font color="#323232">Done</font> to complete the profile setup.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/EPtLi9hQ9KUFZbkP51Q6v_setupappdeviceidtrustscreen.PNG" position="flex-start" size="100" width="758" height="472" initialPath="../Resources/Images/SetupAppDeviceIDTrustScreen.PNG" githubPath="Resources/Images/SetupAppDeviceIDTrustScreen.PNG" darkWidth="758" darkHeight="472" showCaption="false" indent="1"}

9. Click <font color="#323232">Continue</font> to view the profile in the <font color="#323232">Overview</font> page.

You will now have created a profile. You can now add a cloud service provider (SP) and identity provider (IdP) federated pair to this profile.

**Next steps** 

Register a Standalone Sentry to Ivanti Access. See [Registering a Standalone Sentry](docId:-WOvPtIs5h9Bflt8tSBMk).

**Related topics&#xA0;**

See [Federated Pairs](docId\:M8vHyUFQPV8HC1MWrr95A) for information about adding an SP and an IdP federated pair.

## Error conditions for SSL certificate

The SSL certificate you upload to the Sentry profile must meet the security requirements from Apple. If the certificate does not meet the security requirements the system displays error messages. Ivanti Access checks for the following error conditions:

- SHA-1 server certificate or issuing authority detected.
- Server certificate or issuing authority contains RSA key size less than 2048 bits.
- Server certificate does not contain DNS name of the server in the Subject Alternative Name extension.

The following conditions are applicable only if the server certificate is issued after July 1, 2019 as indicated in the certificate. For more information, see the requirements provided by Apple: [https://support.apple.com/en-us/HT210176](https://support.apple.com/en-us/HT210176)

- Server certificate does not contain an ExtendedKeyUsage (EKU) extension containing the id-kp-serverAuth OID.
- TLS server certificates have validity period of more than 825 days.