XenMobile Server

Integrate XenMobile Mobile Device Management (MDM) with Cisco Identity Services Engine (ISE)

November 20, 2023

Cisco ISE is used to deploy, secure, monitor, integrate, and manage mobile devices in the workplace. The software downloaded to the mobile device controls the following:

Distribution of applications and patches
Data and configuration on the endpoint

XenMobile can integrate with Cisco ISE to manage non-compliant and unmanaged devices on the Cisco ISE console. XenMobile also allows you to selectively allow, deny, or quarantine access to corporate services.

To set up the integration with XenMobile, create a local service account on the XenMobile Server with the administrator RBAC role assigned to it. This role allows the Cisco ISE to access the XenMobile API. ISE needs to trust the XenMobile certificate. To download this certificate, open a web browser and navigate to your server URL and log in.

After logging in, click the lock next to the URL in the address bar.
Click Certificate.
Select the Details tab and click Copy to File.
Follow the wizard to save the certificate locally.
Log in to your Cisco ISE console and import the XenMobile certificate you previously downloaded. Import the certificate into Cisco ISE’s Trusted Certificate store. This is necessary for Cisco ISE to trust communication with the XenMobile Server.
1. Navigate to Administration > System > Certificates > Certificate Management > Trusted Certificates. Click Import.
2. Give the certificate a name and check the boxes for Trust for authentication within ISE and Trust for authentication of Cisco Services.
Add XenMobile as an external MDM inside Cisco ISE.
1. Navigate to Administration > Network Resource > External MDM. Clicking Add and fill out the following:
  - Server Host: Your XenMobile FQDN
  - Port: 443
  - Instance name: The instance name of your XenMobile Server. The instance name is “zdm” by default on most deployments.
  - User Name: Type the name of the user that you created for this task. The user must be a local administrator account in the original admin RBAC group.
  - Password: The password for the user you just added.
  - Check where it says Enable.
If the test is successful, click Submit.

For more information about Cisco ISE, see the Cisco documentation.

Note:

The ISE integration isn’t supported with the hosted Endpoint Management.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Integrate XenMobile Mobile Device Management (MDM) with Cisco Identity Services Engine (ISE)

November 20, 2023

Integrate XenMobile Mobile Device Management (MDM) with Cisco Identity Services Engine (ISE)

In this article