To request and install the certificate, the Configuration Manager client for Mac requires the default client settings.
Use the default client settings to configure enrollment for Mac computers. For example, use the FQDN of the management point server. To deploy the client to devices running macOS Sierra, correctly configure the Subject name of the management point certificate. Use a certificate request and installation method that is independent from Configuration Manager. Re-enroll the Mac computer before the installed certificate expires. The enrollment process doesn't support automatic certificate renewal. Use Configuration Manager enrollment by using the CMEnroll tool. Read more about client certificates for Macs in Prepare to deploy client software to Macs. In these procedures, you have two options for installing client certificates. When you install a new client for Mac computers, you might have to also install Configuration Manager updates to reflect the new client information in the Configuration Manager console.
To learn about what you have to configure before deploying clients to Mac computers, see Prepare to deploy client software to Macs. This article describes how to deploy and maintain the Configuration Manager client on Mac computers. Applies to: Configuration Manager (current branch)
