Managing Intermediate Certificates with Mac MDM

Products

• Client Management Suite
• IT Management Suite

Issue/Introduction

The instructions for Mac MDM has the following information:

In addition to the APNS certificate, Server certificate and Signing certificate, you will also need intermediate certificates to verify that the chain of certificates used can be traced back to a trusted root certificate. The Certificate Authority that issued the Server and Signing certificates to your organization should provide the associated intermediate certificates.

It doesn't really say what to do with the Intermediate Certificates obtained from the CA.

Resolution

For MDM for Mac, we should treat the Intermediate Certificates like the other certs required for MDM.

Add the Intermediate certificates to the Management Console as follows:

• Browse to Home > Apple Modern Device Management
• In MDM - macOS > Certificates, click Add New.
• Select Intermediate as the Certificate Category and when prompted, select your new Certificate file and click OK.

The MDM Certificates page displays your new Intermediate certificate.

 

When importing the Certificate into Apple MDM, these options are available: