Configure the fleet before installing the first device. Complete Prepare identity and access first, then in the Bifrost dashboard go to Edge Control → Edge Settings.
1. Set up the certificate authority
Edge needs an organization certificate authority (CA) that each device trusts so it can route AI traffic from supported applications through Bifrost.
Generate a CA
Upload a CA
- In Certificate Authority, select Generate CA.
- Generate the certificate.
- Store the displayed private key securely. It is shown only in the generation result.
- In Certificate Authority, select Upload CA.
- Paste the PEM-encoded certificate and its matching PEM-encoded private key.
- Save the CA.
Replacing the CA changes the certificate every device must trust. macOS MDM deployments need an updated trusted-root profile, and every affected computer must be restarted after it trusts the replacement.
2. Review first-rollout settings
Save any changes before continuing.
3. Download the CA for MDM
If you are deploying to macOS with MDM, select Download .crt from the active certificate view. You will use that exact certificate in the device-scoped trusted-root profile.
Direct installations do not require a separate download. The agent receives the certificate from Bifrost after sign-in.
Choose the installation path
