Step 4 - Install the enrollment configuration file on user devices
In order to prevent tampering, this configuration file is installed in a directory that requires Administrator access, and the file is signed. Do not attempt to modify it.
Install the configuration file on each user device in the following location:
- On Windows devices: C:\ProgramData\Cisco\Cisco Secure Client\ZTA\enrollment_choices
- On macOS devices: /opt/cisco/secureclient/zta/enrollment_choices
If a CA certificate expires or is replaced, deleted, or revoked, you must distribute a new configuration file to authorized devices, with information about the replacement CA certificate.
You can change the file name, but make sure there is only one ZTA enrollment configuration file on the device.