Automating the lifecycle of machine identities across all enterprise Apple devices and CAs is an unexpectedly complex challenge and responsibility for device management and security teams. Device management teams are not PKI experts and need simple, easy access to machine identities.  Security teams are not directly responsible for maintaining mobility access for the business and need to ensure that policies are enforced, including consistent use of machine identities from approved sources. Security teams also want final control over the ability to remove machine identities aka “kill switch.”   With support of the Machine Identity Protection Development Fund, Jamf is looking to bring these two worlds together with the power of Jamf Pro and Venafi Platform.  Jamf Pro will make requests to the Venafi Platform for machine identity lifecycle operations, including certificate issuance, renewal, and revocation.