Blog Post

Core Infrastructure and Security Blog
9 MIN READ

Intune - Enrollment Options for End-Entity Certificates

DagmarHeidecker's avatar
DagmarHeidecker
Icon for Microsoft rankMicrosoft
Jun 29, 2021
Working as a PKI engineer, I am frequently asked about "the best" method to enroll certificates to mobile devices via Intune. What exactly is the best method from a PKI engineer's perspective? The mo...
Updated Jun 29, 2021
Version 1.0
DagmarHeidecker
danielfawcett's avatar
danielfawcett
Copper Contributor
Mar 17, 2022

In the SCEP Certificate Profile Flow diagram, there is an arrow from NDES to the device labelled "5" which in the text refers to the certificate being delivered to NDES.  Should that arrow be there?  It looks like delivering the certificate to the device is actually done by NDES passing the certificate via Intune, labelled "6" in the diagram.  Or have I misunderstood?

Thanks.