---
title: If getting an Entrust derived credential is enabled
slug: device-management-guide/android/if-getting-an-entrust-derived-credential-is-enabled
createdAt: 2026-10-06T07:48:38.093Z
---

If you enabled getting an Entrust derived credential in the System Manager, device users will see <font color="#323232">Request Derived Credential</font> when they receive their registration PIN for a device. Before using the registration PIN to register Ivanti Mobile\@Work to Ivanti EPMM, the device user should request a derived credential.

Figure: Request derived credentials

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/Hf1aDjgVBrz1EVXxJ7BId_requestderivedcredential.jpg" alt="Registration PIN received, now Request Derived Credential dialog box" caption="Registration PIN received, now Request Derived Credential dialog box" position="flex-start" size="77" width="540" height="322" initialPath="../Resources/Images/RequestDerivedCredential.jpg" githubPath="Device Management Guide for Windows/Resources/Images/RequestDerivedCredential.jpg" darkWidth="540" darkHeight="322" showCaption="true"}

**Procedure**

1. Select <font color="#323232">Request Derived Credential.</font>
   The user is directed to the Entrust IdentityGuard self-service module URL that you specified in the System Manager.
2. The user interacts with the Entrust self-service portal to get a derived credential, including naming the derived credential.
   The Entrust self-service portal provides a Derived Mobile Smart Credential Activation Password.
   **Important:&#x20;**&#x54;he user must record this password for later use in activating the derived credential.
3. After recording the password, the user follows directions to indicate he is done.
   The user is directed back to the user portal. A brief message indicates whether getting the derived credential was successful. If it was successful, <font color="#323232">Request Derived Credential</font> is disabled.

The user then does the following:

1. Use Ivanti Mobile\@Work to register the device to Ivanti EPMM.
2. Use the PIV-D Entrust app on the device to activate the derived credential.