# Manage certificate deployment on Linux using Hexnode UEM

Digital certificates enhance device security by enabling secure access to corporate resources over the Internet. They are essential for verifying the authenticity of both clients and servers during network communications, as well as for encrypting the data exchanged between these entities. We can manage certificate deployment on Linux using Hexnode UEM.

Organizations deploy them to employee devices to confirm user identities and simplify access to corporate resources.

Add certificates to Linux devices
---------------------------------

To manage certificate deployment on Linux devices via Hexnode,

1. Log in to your Hexnode UEM portal.
2. Navigate to **Policies**.
3. Select an existing policy or create a new one by clicking **New Policy**.
4. Go to **Linux > Security** and select **Certificates**, then click **Configure**.
5. Click **Add Certificate** and upload the credential certificate.
6. Upon adding the certificate, a few optional fields will be available, 
    - **Credential Name:** This field will already be populated with a default name but can be modified if necessary. The name serves as an identifier for the certificates you have uploaded, making it easier to manage and distinguish between multiple certificates.
    - **Credential Details:** Click on ‘+’ to expand and view the credential details, including the subject, issuer name, and expiry date. Click on ‘–’ to collapse the details section.
7. To remove a certificate, click on the ‘x’ button provided at the top-right corner of each certificate listing.

[![Manage certificate deployment on Linux devices using Hexnode UEM](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2024/11/Manage-certificate-deployment-on-Linux-devices-with-Hexnode-UEM.png "Manage certificate deployment on Linux devices with Hexnode UEM")](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2024/11/Manage-certificate-deployment-on-Linux-devices-with-Hexnode-UEM.png)

 Note: 
For certificates with a .p12 extension, a password is required in addition to the certificate. Ensure you provide this password when uploading the certificate.
[![Managing p12 certificate deployment with a passcode using Hexnode UEM](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2024/11/Manage-p12-certificate-deployment-with-a-passcode-via-Hexnode-UEM.png "Manage p12 certificate deployment with a passcode via Hexnode UEM")](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2024/11/Manage-p12-certificate-deployment-with-a-passcode-via-Hexnode-UEM.png)

 

Associate policy with devices/groups
------------------------------------

If the policy has not been saved,

1. Navigate to **Policy Targets > +Add Devices**.
2. Choose the target devices and click **Ok**. Click **Save**
3. You can also associate the policy with device groups, users, user groups, or domains from the left pane of the *Policy Targets* tab.

If the policy has been saved,

1. Go to the *Policies* tab and choose the desired policy.
2. Click on **Manage** drop-down and select **Associate Targets**.
3. Choose the target entities and associate the policy.

What happens at the device end? 
--------------------------------

To access the certificates folder on Linux devices, follow these steps:

1. Open **Files** on your Linux device.
2. Navigate to the directory: ***/etc/hexnode_agent/certificates.***
3. When prompted, enter the admin credentials to gain access to the folder and view the certificates.

 Note: 
When the *Certificates* policy is disassociated from the devices, all deployed certificates will be removed from those devices.