Patent ID: 8494485

Claim:
A method, comprising: receiving, at a mobile device management system, an indication of a request from a mobile device for a certificate to access an enterprise network, wherein the mobile device includes a control agent that is configured to interact with the mobile device management system via a communications network; accessing, by the mobile device management system, a profile associated with the mobile device; transmitting, by the mobile device management system, a certificate request to a certificate authority on behalf of the mobile device, wherein the certificate request is generated by the mobile device management system based at least in part on the profile of the mobile device; receiving, at the mobile device management system, the certificate for the mobile device in response to the certificate request; determining, by the mobile device management system, that the mobile device is authorized to receive the certificate based at least in part on a security state associated with the mobile device; and transmitting, by the mobile device management system, the certificate to the control agent for installation on the mobile device, based at least in part on the determination that the mobile device is authorized to receive the certificate.