Forum Discussion

Deleted

Jun 26, 2018

Intune Standalone Device-Based Certificate Issue

Can Intune Standalone deploy SCEP certs to devices? In my testing (and according to a recent ticket I opened), it appears standalone can only deploy user certs and that an Intune Hybrid setup is req...

Intune

Oliver Kieselbach

MVP

Jun 30, 2018

Hi,

Standalone Intune + SCEP (PKI, NDES) is definitely possible, running it on several tenants. Your wish for device certs are not available at the moment. This is very well known by the PG and there is also a Uservoice item for it. Go ahead an vote it up:

https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/19805320-deploy-unique-computer-certificates-using-intune-s

best,

Oliver

Deleted

Jul 01, 2018

Like I said, we are already using Intune/SCEP for user certificates. I was hoping that I was just doing something wrong for device-based certificates. Thanks for the information. I've already upvoted the user voice request. BTW, the scenario you layout in the comments in uservoice is almost EXACTLY the issue we are having: we have AAD-bound windows devices that need a device certificate so that the machine can connect to our wireless network at the login screen and so that new users can log in for the first time.

Oliver Kieselbach
MVP
Oct 11, 2018
Hi James,

just for info, device certificates have arrived in Intune.

see here: https://docs.microsoft.com/en-us/intune/whats-new#issue-scep-certificates-to-user-less-devices-

best,

Oliver
- alexander tikhomirov
  Brass Contributor
  Nov 16, 2018
  It seems that it works, but in my test environment I would like to use this device cert to connect to corp WiFi using WPA2-Enterprise profile created in Intune but failed. Somebody uses device based certs deployed by Intune to create corp WiFi network?
  //Alexander
  - Oliver Kieselbach
    MVP
    Nov 19, 2018
    My customer implemented it and is it using currently.
    
    It's also a supported scenario:
    
    https://docs.microsoft.com/en-us/intune/wi-fi-settings-windows#enterprise-profile
    
    Only SCEP profiles are supported when using EAP, PKCS certificate profiles are not supported.
    
    best,
    
    Oliver