Who can use this feature?
š¤ Organizations Owners, Admins, and custom roles with the "Create Certificates" permission.
š© Available on all plans.
Overview
This guide walks you through creating a Certificate Configuration preset for secure device provisioning. The most common use case is Enterprise Wi-Fi authentication.
Supported certificate types
ArborXR supports two certificate types:
CA certificates (trusted root certificates) validate the identity of the server, ensuring devices connect to a trusted network.
User certificates (client certificates) identify and authenticate the device to the server. These are typically provided in PKCS 12 format and are commonly used with EAP-TLS.
Enrollment methods
Certificate presets support the following ways to provision certificates to devices:
SCEP (Simple Certificate Enrollment Protocol), using either a static or dynamic configuration
EST (Enrollment over Secure Transport)
PKCS certificate import
Step 1: Create the Preset
Navigate to Configuration Presets in the side navigation menu.
Click on Certificates to expand the section.
Select Create Certificate.
Select between CA Certificate, Imported PKCS Certificate, SCEP Certificate, or EST Certificate.
Configure certificate details then click Add.
š” Once created, Certificate Configuration Presets can be:
Assigned to groups (CA certificates only, see blow)
Step 2: Assign the Preset (CA certificates only)
Assign the preset from the Configuration Presets library. You can assign it to up to 100 groups or ungrouped devices in a single operation.
Navigate to Configuration Presets in the left sidebar.
Select the checkbox next to the CA Certificate preset you want to assign.
Click Assign.
Choose either Assign to Groups or Assign to Ungrouped Devices.
Select the target groups or ungrouped devices, then click Assign.
š” You can also assign a preset from a single group or ungrouped device: open its Settings tab, click Manage Presets in the top right corner, select the desired Certificates preset, and click Assign Presets.
See Configuration Presets for full details, including how to view a preset's assignments, switch or detach a preset, and how sub-groups and ungrouped devices receive their settings.