Hi Steve,

Thanks for the interesting post!

If you had only Android devices on the web-console, once they check-in they automatically store the certificate on the device and learn the new certificate. You can see for yourself on the MobiControl web-console:

Click on any android device and select the Security tab 

Every android device on your web-console should have 2 certificates(SHA1 and SHA2) and you can confirm them via thumbprint available.

You can search the web-console for what devices have not checked in after the SHA2 certificate was generated to identify the devices that have not learned the new certificate,
With android devices once they check-in they automatically store the certificate on the mobicontrol agent and learn the new certificate. With apple devices you need to push the certificate to the devices in a profile. 

Regards,

Thx for answer.

SHA2 certificate has been added by soti support 9 days ago... But no device shows 2 certificates in console !

Does it mean that certificate has not been learned by any device ? 

Or do i have to double check in any other place  or logs ?

thx.

Hi Steve,

Are those devices on android platform? If so, did they come online/performed check-in anytime after the certificate is pushed?

Please confirm.

Regards,

Hi

Devices are ANDROID 9

They came online.

Certificate is not shown on SECURITY screen but is present on  device (I cehck with settings export from device)

steve

Hi Steve,

If you only have android devices on the console and all those devices have come online/performed check-in anytime after the certificate is pushed, then those devices would have learnt about the new SHA2 certificate generated on the server. 

You can proceed with the SHA2 binding.

Note: It is recommended to have a Server snapshot before binding the SHA2 certificate.

Regards,