How To Distribute Keytos Shield Network Profiles to Your Devices in ManageEngine Mobile Device Manager Plus

Devices require a network profile so they know how to connect to and authenticate with your network. This guide explains how to distribute these profiles to devices using ManageEngine.

Overview - How to Distribute Network Profiles to Your ManageEngine Devices

ManageEngine Mobile Device Manager Plus is a Mobile Device Management (MDM) platform that allows you to configure and manage your organization’s devices, including Windows PCs, macOS devices, Apple Mobile (iOS/iPadOS) devices, and Android devices.

Once you get Keytos Shield up and running in your network, you need to configure your devices so they’ll use EAP-TLS certificate-based authentication to connect to your network. If you’re using ManageEngine to manage your devices, you can follow one of our guides to set up RADIUS authentication in ManageEngine.

How Does Distributing Network Profiles via ManageEngine Work?

Pushing a network profile to a managed device in ManageEngine requires a few different pieces to properly configure trust, encryption, and authentication. This typically involves:

  1. Trusted Certificate: For a device to trust your Shield identities, server endpoints, and network infrastructure, it must have your Shield’s Root CA certificate pushed to its trusted certificate store. Without this certificate, the device will not be able to establish a secure connection to Shield for network access or authentication.
  2. SCEP Certificate: Every ManageEngine managed device needs its own identity and certificate, which is delivered via the Simple Certificate Enrollment Protocol (SCEP).
  3. Wi-Fi Profile: A Wi-Fi profile contains the necessary network settings, such as the SSID, security type, and authentication method, required for the device to connect to your network. This profile ensures that the device can automatically connect to the network using the appropriate credentials and certificates provisioned through ManageEngine.

How to Distribute Keytos Shield Network Profiles with ManageEngine by Device Platform

Select the guide for the devices you manage with ManageEngine:

  • Windows devices: Push your Shield Root CA and a Wi-Fi Library Item with a SCEP certificate to your Windows devices.