Addigy MDM SCEP/EAP-TLS

Configure EAP-TLS on Foxpass

Please follow the EAP-TLS initial setup guide to create client CA, server CA and SCEP endpoint if not configured already.

See Addigy docs here:

https://support.addigy.com/hc/en-us/articles/4403542462099-Use-Device-Facts-as-MDM-Profile-Variables

Combine with Apple Configurator, with the changes below:

For the CN field in Apple Configurator, use CN={{.Fact "identity_email"}}, and for SAN/RFC822 name, use {{.Fact "identity_email"}}

If the identity_email fact is not available in Addigy, then turn off SCEP endpoint verification and choose another device fact, like device_name or serial_number.

The take the .mobileconfig generated by Apple Configurator, and upload it to Addigy. Deploy it to your test group.