To use external applications with certificate-based authentication, the external application passes the MDM Hub a concatenation of the application name and username. For example,

IDD/admin

. The external application must also pass a security payload. To generate a security payload, use the security payload generator utility in the Resource Kit. The application user also needs a private key, which must be maintained by the client. For more information about the security payload generator utility, see the

Multidomain MDM Resource Kit Guide

.

The MDM Hub creates public certificates that you can use for certificate-based authentication, but you can choose to implement a custom certificate provider. To implement a custom certificate provider, you must implement the

PKIUtil.java

interface in the

siperian-server-pkiutil.jar

file, which is in the following directory: