Forum Discussion
oryxway
Feb 27, 2023Iron Contributor
Deploy Windows 11 device certificate with password through Intune
I am using configuration profile to push device cert through Intune and get the cert installed. I am not sure how would I do it for a CERT that has a password. I was trying using OMA-URI custom p...
- Mar 02, 2023Nice, if it works.. Share 😊
oryxway
Feb 28, 2023Iron Contributor
Thanks Harm. How about installing Certificates through Configuration Profiles and choosing Trusted Certificate. Now, does this install the Certificate? Also, what if the Certificate is already installed, will this method check to see that the Certificate is present and will not install or how does this work.
In general all the different types of Certificates that can be installed like SCEP, Trusted Certificate, PKCS will that get installed on the device if we import the CERT other than the one that needs a password?
In general all the different types of Certificates that can be installed like SCEP, Trusted Certificate, PKCS will that get installed on the device if we import the CERT other than the one that needs a password?
Feb 28, 2023
A trusted certificate configuration profile only puts a Root or Intermediate in your certificate store... SCEP enrollment is better, but if you have a specific one that a few clients need... Then you could create a package for it, but then you would have the password of it in a script... Is it a sensitive (like banking) certificate?
- oryxwayMar 02, 2023Iron ContributorI asked them to go with NDES or SCEPMAN (germany) but we planned to use our own CERT. So, could not do much. I also learnt that there is Microsoft Graph method of deploying PKE cert which is more secure rather than deploying it to the machine and then installing it. It looks complicated process but it is secure I think.
- Mar 02, 2023Nice, if it works.. Share 😊
- oryxwayMar 02, 2023Iron ContributorHarm I am having an issue with the cert import it is failing actually. I thought it worked.
It says cannot bind parameter 'Password'. Cannot convert the 'password' value of type "system.string' to type "system.security.securestring".
At line:1 char:99
- Mar 01, 2023Answered here now, I guess? https://techcommunity.microsoft.com/t5/microsoft-intune/installing-certificate/td-p/3756747