Configure device registration settings

Choose which certificate authorities are trusted for device registration.

About this task

Trusting a CA for device registration means Okta accepts certificates issued by that CA when verifying a device during registration.

Note:

If your org has no existing certificate authorities, Okta creates one automatically the first time you create a SCEP configuration. That certificate authority isn't trusted for device registration by default. Select it in this list before device registration can use it.

Procedure

In the Admin Console, go to Security > Device integrations.
Select the Device registration tab.
In the Device registration settings card, select Edit.
Select which certificate authorities to trust for device registration.

Note: If you clear a certificate authority that's currently trusted, Okta warns you that the change may prevent users from registering devices. Before you save, update any access policies that rely on the certificate authority being trusted for device registration.
Select Save.