--- title: Managing Certificates and Configuring Certificate Authorities slug: device-management-guide/android/managing-certificates-and-configuring-certificate-authorities createdAt: 2026-10-06T07:48:37.423Z --- This section addresses components related to managing certificates and certificate authorities. ::::LinkArray{contentSource="DOCS" itemsPerRow="1" sortOption="DEFAULT" displayMode="LINK" sourceParentDocId="_Oeb92thIN4HaGQiNZ6hc" childrenDocs="[{"docId":"5q2rMo5PvNZ_fu7jpplrR","docTitle":"Certificates overview"},{"docId":"ShZDim_4aVznpKdRaxCMe","docTitle":"Managing certificates issued by certificate enrollment configurations"},{"docId":"qC6wefPFklI1Ru5Wssxu9","docTitle":"Supported certificate scenarios"},{"docId":"t2hXLKUSnkzsz-p3hJtk7","docTitle":"Ivanti EPMM as a certificate authority"},{"docId":"ZI0Chv0R2SmRs0f2v27lr","docTitle":"Configuring Ivanti EPMM as an independent root CA (Self-Signed)"},{"docId":"DAuyk8SzjWzUYDoF0uRAJ","docTitle":"Configuring Ivanti EPMM as an intermediate CA"},{"docId":"BDVHFtqhLrH7XXzRJseog","docTitle":"Mutual authentication between devices and Ivanti EPMM"},{"docId":"9VydiINAAIMJ47nqkdbeX","docTitle":"Certificates settings"},{"docId":"sCPZt3_eP7EmqVr0wmTNx","docTitle":"Certificate Enrollment settings"},{"docId":"hsQQRZpvaC-xtJqXbkKC5","docTitle":"Cert_Enroll_s_1_ConfigBlueCoat"},{"docId":"AuqJ1c_2kLb3GH-2CmXhh","docTitle":"Configuring a client-provided certificate enrollment setting"},{"docId":"KpsQgWC1aXoVdfqrZDzXk","docTitle":"Configuring an Entrust CA"},{"docId":"KeRR66y83SqxOWWgHXYm1","docTitle":"Configuring a GlobalSign CA"},{"docId":"DsIj9CUTAZr36xwKyGL4T","docTitle":"Configuring Ivanti EPMM as the CA"},{"docId":"UDW_CwryI1LEUxaGfIxjJ","docTitle":"Configuring OpenTrust CA"},{"docId":"3Jc358Z3LZjNQ_tfJzDHL","docTitle":"Configuring a single file identity certificate enrollment setting"},{"docId":"i9AgJwp-dKz51SITxubCa","docTitle":"Configuring SCEP"},{"docId":"OtDVUkCKKXwqWdIDsecD5","docTitle":"Enabling Kerberos Authentication between EPMM and the SCEP and LDAP servers"},{"docId":"WLDybuk3jNdw3vobCakvo","docTitle":"Configuring Symantec Managed PKI"},{"docId":"-QKOyVDyJtWuv4GaCutTa","docTitle":"Configuring Symantec Web Services Managed PKI"},{"docId":"dN4TFJlRENme75ebKxJ3C","docTitle":"Configuring a user-provided certificate enrollment setting"}]"} :::LinkArrayItem{headerType="NONE" docId="5q2rMo5PvNZ_fu7jpplrR" displayMode="LINK"} [Certificates overview](docId:5q2rMo5PvNZ_fu7jpplrR) ::: :::LinkArrayItem{headerType="NONE" docId="ShZDim_4aVznpKdRaxCMe" displayMode="LINK"} [Managing certificates issued by certificate enrollment configurations](docId\:ShZDim_4aVznpKdRaxCMe) ::: :::LinkArrayItem{headerType="NONE" docId="qC6wefPFklI1Ru5Wssxu9" displayMode="LINK"} [Supported certificate scenarios](docId\:qC6wefPFklI1Ru5Wssxu9) ::: :::LinkArrayItem{headerType="NONE" docId="t2hXLKUSnkzsz-p3hJtk7" displayMode="LINK"} [Ivanti EPMM as a certificate authority](docId\:t2hXLKUSnkzsz-p3hJtk7) ::: :::LinkArrayItem{headerType="NONE" docId="ZI0Chv0R2SmRs0f2v27lr" displayMode="LINK"} [Configuring Ivanti EPMM as an independent root CA (Self-Signed)](docId\:ZI0Chv0R2SmRs0f2v27lr) ::: :::LinkArrayItem{headerType="NONE" docId="DAuyk8SzjWzUYDoF0uRAJ" displayMode="LINK"} [Configuring Ivanti EPMM as an intermediate CA](docId\:DAuyk8SzjWzUYDoF0uRAJ) ::: :::LinkArrayItem{headerType="NONE" docId="BDVHFtqhLrH7XXzRJseog" displayMode="LINK"} [Mutual authentication between devices and Ivanti EPMM](docId\:BDVHFtqhLrH7XXzRJseog) ::: :::LinkArrayItem{headerType="NONE" docId="9VydiINAAIMJ47nqkdbeX" displayMode="LINK"} [Certificates settings](docId:9VydiINAAIMJ47nqkdbeX) ::: :::LinkArrayItem{headerType="NONE" docId="sCPZt3_eP7EmqVr0wmTNx" displayMode="LINK"} [Certificate Enrollment settings](docId\:sCPZt3_eP7EmqVr0wmTNx) ::: :::LinkArrayItem{headerType="NONE" docId="hsQQRZpvaC-xtJqXbkKC5" displayMode="LINK"} [Cert\_Enroll\_s\_1\_ConfigBlueCoat](docId\:hsQQRZpvaC-xtJqXbkKC5) ::: :::LinkArrayItem{headerType="NONE" docId="AuqJ1c_2kLb3GH-2CmXhh" displayMode="LINK"} [Configuring a client-provided certificate enrollment setting](docId\:AuqJ1c_2kLb3GH-2CmXhh) ::: :::LinkArrayItem{headerType="NONE" docId="KpsQgWC1aXoVdfqrZDzXk" displayMode="LINK"} [Configuring an Entrust CA](docId\:KpsQgWC1aXoVdfqrZDzXk) ::: :::LinkArrayItem{headerType="NONE" docId="KeRR66y83SqxOWWgHXYm1" displayMode="LINK"} [Configuring a GlobalSign CA](docId\:KeRR66y83SqxOWWgHXYm1) ::: :::LinkArrayItem{headerType="NONE" docId="DsIj9CUTAZr36xwKyGL4T" displayMode="LINK"} [Configuring Ivanti EPMM as the CA](docId\:DsIj9CUTAZr36xwKyGL4T) ::: :::LinkArrayItem{headerType="NONE" docId="UDW_CwryI1LEUxaGfIxjJ" displayMode="LINK"} [Configuring OpenTrust CA](docId\:UDW_CwryI1LEUxaGfIxjJ) ::: :::LinkArrayItem{headerType="NONE" docId="3Jc358Z3LZjNQ_tfJzDHL" displayMode="LINK"} [Configuring a single file identity certificate enrollment setting](docId:3Jc358Z3LZjNQ_tfJzDHL) ::: :::LinkArrayItem{headerType="NONE" docId="i9AgJwp-dKz51SITxubCa" displayMode="LINK"} [Configuring SCEP](docId\:i9AgJwp-dKz51SITxubCa) ::: :::LinkArrayItem{headerType="NONE" docId="OtDVUkCKKXwqWdIDsecD5" displayMode="LINK"} [Enabling Kerberos Authentication between EPMM and the SCEP and LDAP servers](docId\:OtDVUkCKKXwqWdIDsecD5) ::: :::LinkArrayItem{headerType="NONE" docId="WLDybuk3jNdw3vobCakvo" displayMode="LINK"} [Configuring Symantec Managed PKI](docId\:WLDybuk3jNdw3vobCakvo) ::: :::LinkArrayItem{headerType="NONE" docId="-QKOyVDyJtWuv4GaCutTa" displayMode="LINK"} [Configuring Symantec Web Services Managed PKI](docId:-QKOyVDyJtWuv4GaCutTa) ::: :::LinkArrayItem{headerType="NONE" docId="dN4TFJlRENme75ebKxJ3C" displayMode="LINK"} [Configuring a user-provided certificate enrollment setting](docId\:dN4TFJlRENme75ebKxJ3C) ::: ::::