Alternative way to install client vpn certificate using F5 access 2018

Dear F5 Support,

 

We are using F5 BIG-IP APM to serve as a VPN gateway for allowing external using (Running Apple IOS F5 Access for IOS V2.1.1) to establish a VPN connection and access the internal network resources. We are using client certificate base authentication which checked on our Access Policy.

 

Refers to https://support.f5.com/kb/en-us/products/big-ip_apm/releasenotes/related/relnote-f5access-ios-3-0-0.html, a client can only use a self-signed certificate if the CA is first trusted on the device. Client certificates must be installed by an MDM, or with a .mobileconfig file, and there are no runtime prompts supported.

 

Our question is besides using MDM and .mobileconfig file, is there other alternative to install the client vpn certificate on the mobile device ?

 

Thanks & Regards Patrick