---
title: Configuring Ivanti EPMM as an intermediate CA
slug: device-management-apple/configuring-ivanti-epmm-as-an-intermediate-ca
createdAt: 2026-10-06T07:47:37.263Z
---

When you configure Ivanti EPMM as an intermediate certificate authority, the managed device users can authenticate to servers within your company intranet; not just the Ivanti EPMM system.

After you get the certificate from your certificate vendor, you can add the certificates to Ivanti EPMM to create the intermediate certificate authority (CA).

**Procedure **

1. In the Admin Portal go to Services > Local CA.
2. Click on Add > Intermediate Enterprise CA.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/QK1taIYrVZRkN9nE5dVon_intcert.PNG" position="flex-start" size="70" width="493" height="303" initialPath="../Resources/Images/IntCert.PNG" githubPath="Device Management Guide for Apple/Resources/Images/IntCert.PNG" darkWidth="493" darkHeight="303" showCaption="false" indent="1"}

3. Click Browse and navigate to the combined file.
4. Click Open.
5. Enter a recognizable name in the Local CA Name field.
6. Click Upload Certificate.
   Your local certificate authority is now available to use. The local CA will be listed in Services > Local CA.