Admins may want to silently install and deploy certificates for Zebra devices using an OEM agent. Now remotely managed Zebra devices can be silently authenticated for access to a network using the below steps.
Purpose
The purpose of this knowledge article is to provide a guide on how to silently install and deploy certificates for Zebra devices.
Prerequisites
- An OEM Agent has to be installed on the device to communicate with the StageNow client.
- This method works from version MX 4.3 onward.
Steps
Steps to install and deploy certificates to Zebra devices.
- Install the OEM Agent using the Android Install job.
- Create a File Transfer job with the certificate and apply it to the devices.
- Create a run script with the below-mentioned script and change the required details.
- Push the run script on the device and check the installed certificates.
Step 1
- Upload the Zebra OEM Agent to the App store.
- Go to Jobs and select Install Applications.
- Select the OEM app from the SureMDM App store and save the job.
- Apply the job on the Zebra device.
NOTE :
- You can also install OEM agents through profiles. For additional details, click on this link.
- For more information on how to install applications on a device through the console, please refer to this link.
Step 2
- Create a File Transfer job and upload the required certificate to the job.
- Apply the created certificate file transfer job on the device.
Step 3
- Create a Run Script job to silently install the certificate (.PEM,.PFX,.P12, etc.) on Zebra devices.
- Apply the runscript job on the device.
Script:
!#suremdm
zebra(<wap-provisioningdoc><characteristic version=”4.2″ type=”CertMgr”><parm name=”CertAction” value=”1″ /><characteristic type=”cert-details”><parm name=”CertAlias” value=”cert.pem” /><parm name=”CertType” value=”8″ /><parm name=”CertMethod” value=”2″ /><parm name=”CertFileClient” value=”/sdcard/cert.pem” /><parm name=”CertAdjustClock” value=”false” /><parm name=”PrivateKeyPassword” value=”apples” /></characteristic></characteristic></wap-provisioningdoc>)value=”false” /><parm name=”PrivateKeyPassword” value=”apples” /></characteristic></characteristic></wap-provisioningdoc>)
In the above script replace: <parm name=”CertAlias” value=”cert.pem” /> with actual certificate name, <parm name=”CertFileClient” value=”/sdcard/cert.pem” /> with actual cert. path from device location and password from mentioned params. <parm name=”PrivateKeyPassword” value=”apples” />.
Need more help? Here’s how to get help from our experts.