Cisco Secure Access Help

PDF

Cisco Secure Access Help

MobileIron Registration

Updated: August 24, 2026

Want to summarize with AI?

Log in

Describes MobileIron Registration in Cisco Secure Access and explains Prerequisites and Anonymization. It summarizes the behavior, configuration context, and operational considerations presented throughout the topic.

By downloading an XML file from Secure Access, optionally updating it, and then pasting its contents into your MobileIron system, MobileIron is able to push configuration information to both the Cisco Security Connector (CSC) and Secure Access so that your iOS device is registered with Secure Access. The result is that your iOS device is protected by Secure Access.

For information about configuring your specific Mobile Device Management (MDM) system, see your MDM system's documentation.

Note
Secure Access supports MobileIron Enterprise Mobility Management (EMM) On-Prem and Cloud versions 9.4 or higher.

Prerequisites

  • The Cisco Security Connector requirements

  • MobileIron EMM On-Prem and Cloud versions 9.4 or higher.

  • You must first configure your MobileIron MDM system. Configure your MobileIron system as required so that it is able to push configuration information to both CSC and Secure Access. For information about configuring MobileIron, see MobileIron documentation. For more information about adding the CSC to your MobileIron MDM, see MobileIron Configuration and MobileIron documentation. For support, contact MobileIron support.

Anonymization

Secure Access provides you with the option of anonymizing mobile devices for reporting and administration purposes. When you anonymize a mobile device, its label is hidden and replaced by your device's serial number. The label name is anonymized in both the Secure Access dashboard and in the CSC app UI. For information about how to anonymize your device, see Anonymize Devices.

Procedure for Registering MobileIron MDM Solution

Note
You must log into your Secure Access dashboard as an administrator.

Procedure

  1. In Secure Access, navigate to Connect > End User Connectivity and click Internet Security. Click the iOS tab.


    iOS tab displaying the option to download the associated iOS configuration file for MDM configuration

  2. Under the MDM Managed Devices section, click Download.

  3. In the Configure Managed iOS Clients window, click Download.


    Configure iOS Managed Clients window displaying the option to download the MobileIron configuration file

  4. Add the administrator's email address to which the problem report will be sent when an issue occurs and click Download.

    This email address is where diagnostic reports are sent when a user clicks the I icon from within the iOS device. Once set, this email address is automatically added when managing an MDM.


    Download MobileIron Config configuration section for adding the email address to receive diagnostic reports when an issue occurs

  5. Copy the contents of the downloaded XML file and paste or upload it into your MDM profile (Policies & Configs > Configurations > iOS and MacOS > iOS Only). For information about configuring the MobileIron system, see MobileIron documentation.

    Note
    For MobileIron cloud, "$DEVICE_SN$ may need to be replaced with "$".

What to do next

If successful, your mobile device registers with Secure Access and is listed at Resources > Roaming Devices > Mobile Operating Systems. CSC on your mobile device updates to connect to Secure Access so that your iOS device is protected by Secure Access.


Mobile Operating Systems tab displaying the list of mobile devices registered with Secure Access

If you have anonymized your device (see Anonymize Devices), Secure Access hides the device's true label name by replacing it with the device's serial number. Existing active devices anonymize with 24 hours. New devices anonymize immediately.


Mobile Operating Systems tab displaying the device serial number

As no changes can be made in Secure Access to the actual provisioned device, these mobile devices are simply listed in Secure Access as identities; however, you can now use Secure Access to apply policies to these mobile device identities. For more information, see Apply a DNS Policy to Your Mobile Device.

Verify Secure Access on Your iOS device

Procedure

  1. In the CSC app, tap the Status icon and confirm that it shows Protected by Secure Access.

  2. For protection details, tap Protected by Secure Access.


    Screen displaying the protection status of your iOS device

MobileIron Configuration

To download the Secure Access root certificate and deploy that to the mobile device for registration, follow these instructions.

From the AMP console:

Before you begin

Before registering MobileIron with Secure Access, add the Cisco Security Connector (CSC) to your MobileIron MDM.

Procedure

  1. Navigate to Accounts > Business.

  2. Under Features, click MDM Integration.

  3. From the MDM Type drop-down list, select MobileIron.

  4. Click Save.

MobileIron Cloud Configuration

Currently, the MobileIron download on the dashboard supports the on-premise version only. The cloud version utilizes different device variables than the on-premise software. Deployment is very similar to on-premise, with several exceptions. To deploy to MobileIron Cloud:

Ensure your admin email address is added to the dashboard under the Mobile Devices page, settings option.

Procedure

  1. Download the Mobile Iron profile from the Secure Access dashboard.

  2. Replace the variable “$DEVICE_SN$” to $

  3. Replace the variable “$DEVICE_MAC$” to $ (This is only used for the Clarity component of the CSC, not used for the Secure Access component. If you do not use Clarity, there will be no $DEVICE_MAC$ to replace.)

MobileIron On-Prem Configuration

To deploy to On-Prem version:

Ensure your admin email address is added to the dashboard under the Mobile Devices page, settings option.

Procedure

  1. Create a new label.

  2. Download the Cisco Security Connector app from the iTunes store through MobileIron Core Console, and apply it to the label.

  3. Obtain licenses through the Apple DEP webpage.

  4. Create a certificate configuration with Cisco Umbrella Certificate uploaded, and then apply it to the label.

  5. Create the Configuration Profile and upload the correct XML file, and then apply it to the label.


    New Configuration Profile Setting screen with option to create and upload a new configuration profile