Enterprise Wifi Profiles Deployment for Non-User Based (Kiosk) macOS devices via Intune and NDES.

Hi Curious_Kevin16,

to deploy enterprise Wi-Fi profiles to non-user based (kiosk) macOS devices using Intune and NDES, you can use the following steps:

1. Create a SCEP certificate profile in Intune.

   • Go to Devices > Configuration profiles > Create profile.
   • Select Platform > macOS.
   • Select Profile type > Certificates.
   • Select SCEP certificate profile.
   • Enter a Name and Description for the profile.
   • Under Subject name format, select {{AAD_Device_ID}} or {{AzureADDeviceId}}.
   • Under Subject alternative name (SAN), select URI and enter IntuneDeviceId://{{DeviceId}}.
   • Under Trusted root certificate profile, select the trusted root certificate profile that you have deployed to your devices.
   • Click Next and Create.

2. Configure the NDES server.

   • Configure the NDES server to issue device certificates with the following SAN attributes:

     • URI: IntuneDeviceId://{{DeviceId}}

   • For more information, see Configure NDES for SCEP enrollment: https://learn.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure.

3. Deploy the SCEP certificate profile and Wi-Fi profile to your devices.

   • Go to Devices > Configuration profiles > All profiles.
   • Select the SCEP certificate profile and the Wi-Fi profile that you want to deploy.
   • Click Assign and select the devices or groups that you want to deploy the profiles to.
   • Click Assign.

4. Restart the devices.

Once the devices have restarted, they will obtain a device certificate from the NDES server and use it to authenticate to the enterprise Wi-Fi network.

Here are some additional links for reference:

• Deploy Wi-Fi profiles with Microsoft Intune: https://learn.microsoft.com/en-us/mem/intune/configuration/wi-fi-settings-configure
• Use SCEP certificate profiles with Microsoft Intune: https://learn.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure
• Configure NDES for SCEP enrollment: https://learn.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure