There's a new home for Articles. Find Articles on Our Product Support Page.
Many of my corporate and governmental customers have new internal security policies to phase out all weak length 1024-bit certificates in the IT infrastructure. Many asked about migration of their existing v11/v12/v13 length-1024-bit MobiControl root certificate to length-2048-bit. As they have hundreds or thousands of devices enrolled & deployed, they cannot tolerate large-scale device recall and re-enrollment. Someone from Soti support team informed me about the procedure to use MCadmin to install, bind and push the new 2048-bit root certificate to all enrolled devices. However , he hadn't confirmed with me whether or not the old 1024-bit root certificate can eventually be removed from all the migrated devices and from the v11/v12/v13 MobiControl server. He then left Soti in early 2018 with the question not completely answered. Does Soti provide a complete SEAMLESS MIGRATION solution to TOTALLY phase out its old weak root-certificate for old customers to pass more modern security policies?
Forthcoming iOS12 requires all MDM/EMM solutions to use an SSL certificate with minimum key-length of 2048-bit and using at least SHA2 hashing. Is there similar new requirement(s) for the root certificate in the MDM server? In particular, can all iOS 10/11 enrolled devices stay under full control by a v10-13 MobiControl server using length-1024-bit self-signed root certificate, when such devices are upgraded to iOS12?
Top-tier experts who are delivering outstanding content. Should have more than 7000 points.
Experts who are consistent with great content. Should have more than 1000 points
Highly experienced members with valuable inputs. Should have more than 700 points
Beginners taking the initiative. Should have more than 500 points