MicrosoftMicrosoftThis time last year, I worked with the dev that makes the ADCS-ACME extension for ADCS to get hardware-bound certificates working on macOS and iOS/iPadOS. It has the potential to add a great layer of security but it’s taking a while to take-off. It takes Private Key Attestation to the next level by having Apple sign that the device is a genuine Apple device too. Intune should add this particular ACME capability, both in the configuration profile UI and within Cloud PKI.
Hi Andrew, that's a great idea! We're captured your feedback on our side, but please consider also submitting this to our Microsoft Intune Feedback Portal: aka.ms/IntuneFeedback where other customers can also join the discussion by voting and commenting on this. Thanks! 🙂
