Forum Discussion

oryxway's avatar
oryxway
Iron Contributor
Feb 27, 2023
Solved

Deploy Windows 11 device certificate with password through Intune

I am using configuration profile to push device cert through Intune and get the cert installed. I am not sure how would I do it for a CERT that has a password.   I was trying using OMA-URI custom p...
Intune
  • Harm_Veenstra's avatar
    Harm_Veenstra
    Mar 02, 2023
    Nice, if it works.. Share 😊
oryxway's avatar
oryxway
Iron Contributor
Mar 02, 2023
I asked them to go with NDES or SCEPMAN (germany) but we planned to use our own CERT. So, could not do much. I also learnt that there is Microsoft Graph method of deploying PKE cert which is more secure rather than deploying it to the machine and then installing it. It looks complicated process but it is secure I think.
Harm_Veenstra's avatar
Harm_Veenstra
MVP
Mar 02, 2023
Nice, if it works.. Share 😊
  • oryxway's avatar
    oryxway
    Iron Contributor
    Mar 02, 2023
    Harm I am having an issue with the cert import it is failing actually. I thought it worked.

    It says cannot bind parameter 'Password'. Cannot convert the 'password' value of type "system.string' to type "system.security.securestring".
    At line:1 char:99
    • Harm_Veenstra's avatar
      Harm_Veenstra
      MVP
      Mar 02, 2023
      Ah 🙂 Use this to set $password = ConvertTo-SecureString -String "passwordhere" -AsPlainText -Force, and then you can use -Password $password
      • oryxway's avatar
        oryxway
        Iron Contributor
        Mar 02, 2023
        Cannot convert 'System.String' to the type 'System.Management.Automation.SwitchParameter' required by parameter 'AsPlainText'

Resources