Blog Post

Core Infrastructure and Security Blog
13 MIN READ

NDES Security Best Practices

DagmarHeidecker's avatar
DagmarHeidecker
Icon for Microsoft rankMicrosoft
Oct 11, 2021
Hi, I am Dagmar, working for the Microsoft Compromise Recovery Security Practice team. As NDES (Network Device Enrollment Server) – if misconfigured or not secured and hardened properly – can be a do...
Updated Oct 11, 2021
Version 1.0
DagmarHeidecker
white27's avatar
white27
Copper Contributor
Jan 04, 2022

Thanks for the precious best practice on hardening NDES.
We are using an MDM to deliver certificates to smartphone. For security reason, is there the possibility to manual issue the certificate once the certificate request come to CA and then have the NDES that take the issued certificate and send it to the device?
I tried setting up that issuing must be done from administrator on certificate template, but after manually issue the certificate will not sent to the device.