What Happens If Admins Do Not Roll Out the New Certificate for Managed Devices
Dec 2, 2025
Devices and Mobility
Multi-Factor Authentication
Okta Identity Engine
Overview
This article explains what happens if admins do not roll out the new certificate for Okta Managed Devices.
Applies To
- Managed Devices
- Okta Identity Engine (OIE)
Solution
The certificate will continue to work until the user installs and registers Okta Verify on their device. Once Okta Verify is installed and the end user registers for it on their desktop, if they do not have the new certificate, they will not be able to access any apps that require end users to be on a Trusted Device/Managed.
