HexCon is coming to NYC. Catch the early-bird price before the time's up! Book me a spot

Not able to install CA certificates. Error: install CA certificates in SettingsSolved

Participant
Discussion
3 years ago

Not able to push certificates from Hexnode (CA certificates to be specific)

Device details:
Google Pixel
Android 11
Downloaded Hexnode UEM and used open enrollment

Replies (5)

Marked SolutionPending Review
Participant
3 years ago
Marked SolutionPending Review

Might be a security precaution implemented by Android. Heard that android 11 is making it extra difficult to install CA certificates. https://developer.android.com/work/versions/android-11

You might have to install the CA certificates manually.

Marked SolutionPending Review
Hexnode Expert
3 years ago
Marked SolutionPending Review

Hello Agneta,

Thank you for reaching out to us. In Android 11 devices, CA certificates can only be installed by apps that have device/profile owner permission. To install CA certificates on Android 11 through the Hexnode portal, you will have to enroll the device in Android Enterprise.

You can even install it manually on your device. Make sure that the certificates are already present on the device before you attempt to install them. The steps to manually install a CA certificate might vary from one device to another. To install a CA certificate on Pixel running Android 11:

  1. Go to Settings > Security > Encryption & credentials > Install a certificate > CA certificate.
  2. Read the warning and select, Install anyway.
  3. Enter your device pin/password and choose the certificate to be installed.

Note that all certificates other than CA certificates can be installed through Hexnode even if the app doesn’t have device/profile owner permission.

Cheers!!
Deborah Timothy
Hexnode UEM

Marked SolutionPending Review
Participant
3 years ago
Marked SolutionPending Review

@Agneta  Enrolling as non-Android Enterprise as device owner also works (or atleast it worked for me). This might be useful https://www.hexnode.com/mobile-device-management/help/how-to-enroll-a-device-in-non-android-enterprise-as-device-owner-using-hexnode/

Marked SolutionPending Review
Participant
4 months ago
Marked SolutionPending Review

My problem

Screenshot_20240330_230639

Marked SolutionPending Review
Hexnode Expert
4 months ago
Marked SolutionPending Review

Hello @sohan-mondal, welcome to Hexnode Connect!

It would be helpful if you could please share a few additional details, such as the device you’re using and the method of enrollment used, so that we can look into this case further.

Best regards,
Chloe Edison
Hexnode UEM