Last updated: August 14, 2026
Certificate
The tvOS Certificate Profile in ManageEngine MDM enables administrators to deploy server CA certificates to managed Apple TV devices, securing and validating network communications with internal and external websites. This profile supports distributing certificates for use cases such as Wi-Fi, email, and S/MIME-based network access. Administrators can configure certificate file uploads and handle password-protected certificates. The page also covers certificate renewal best practices and guidance on when to use SCEP for large-scale, automated certificate distribution.
Certificate policy lets you deploy server CA certificates, to secure and configure features such as, Wi-Fi, E-mail etc., in the managed devices. This policy lets you distribute certificates to mobile devices and ideally used to secure and validate network communications from the device to any internal/external website. By pushing certificates to device, you can secure access to networks/servers, secure e-mail communication etc., For example, you can deploy CA certificates to the managed devices, if your organization uses S/MIME to connect to a network/server. The certificates pushed to the device ensures the devices trusts the enterprise CA.
For scaleable and and simplified distribution of certificates in large organizations, you can configure Simple Certificate Enrollment Protocol(SCEP)
Profile Description
| Profile Settings | Description |
|---|---|
| Certificate File | The file to be pushed to the managed devices |
| Password | This optional parameter must be entered if the certificate is password protected |
- The certificates are added only if the certificate files are not corrupt and the correct password is provided in case of password-protected certificates.
- On certificate expiry, upload the renewed certificate as a new certificate in the profile and then push it to the managed devices.
Frequently Asked Questions
What happens if I upload a certificate that's password-protected?
You must enter the correct password when uploading. If the certificate file is corrupt or the password is incorrect, the certificate won't be added to the profile.
How do I renew an expiring certificate on managed tvOS devices?
Upload the renewed certificate as a new certificate in the same profile and push the updated profile to the managed devices before the existing certificate expires.
When should I use SCEP instead of the Certificate profile?
Use Simple Certificate Enrollment Protocol (SCEP) for scalable, automated certificate distribution in large organizations instead of manually uploading and pushing individual certificate files.