After configuring the certificate authority, we're ready to begin the process of issuing certificates to users that will be deployed via the iPhone Configuration Utility to iPhones and other iOS devices. To do this, we have a few different options, including:
Use the Web Enrolment service to request end-user certificates as the user themselves approve the certificate request as an Administrator, then export the certificate from the requesting computer
Enable the ability to request certificates on behalf of a user, then request certificates as an Administrator for each user a certificate is required for
To use the first option, the Web Enrolment service can be reached as an end user by visiting the /CertSrv
URL on the certificate authority server itself. In our example server, this would be the following URL:
https://certserver.lisajanedesigns.co.uk/CertSrv
After visiting the URL, a user can then request a user certificate, which can then be approved...