Prestage enrollment

[mahadeva83]

Hi, We are in process of setting up Pre-stage enrollment. We are using third party SSL certificate. How we can configure Anchor certificate. whether it will by default as self sign certificate or 3rd party SSL certificate or do we need to add manually? If manually which certificate do we need to add. We don't have load balancer and using SSL certificate verification as Always except during enrollment.

[ryan_ball]

If the certificate is already trusted on the devices, which would be the case for most third-party SSL certificates, then you remove any certificates from the trust anchor section. You'd only populate the trust anchor section with a certificate if the certificate is not trusted on the device, which would be the case if you used a self-signed certificate.