Event details

A cloud-based public key infrastructure (PKI) service, Microsoft Cloud PKI will handle all aspects of the certificate lifecycle for Intune managed devices. Adhering to PKI industry standards, simple ...
Char_Cheesman
Updated Dec 27, 2024
Technical Takeoff
SurpriseExpectations's avatar
SurpriseExpectations
Copper Contributor
Nov 15, 2023
I am very curious to see how this is delivered. PKI that is easily accessible for on prem usages, like WiFi auth, may be the largest pain point keeping companies from going to 100% cloud hosted O365 AD and Domain services. However, the cost and features offered will be the keystone points of value here. If this was built with a focus on delivering the missing tools and features, it could be amazingly good. If it's being built as a new way to charge and upsell, it'll be another disappointing "profit first" product. Corporations have lost sight of a key factor recently. Profits, are the result of a good product and offering. Currently, profit is the only item truly valued. Boards and stakeholders demand the profit margins move ever to the right, despite record breaking profits being reported. The result of this is a tired and predicated client base and inferior products being released with a focus on what they can charge, and not what value it offers.
  • jabbrwcky's avatar
    jabbrwcky
    Brass Contributor
    Nov 15, 2023

    You're so right.  I honestly think on-prem wifi auth is the single biggest reason that orgs are staying hybrid.  Incredibly, MS customers have been asking for a solution in this space for https://feedback.azure.com/d365community/idea/801d1ff9-b425-ec11-b6e6-000d3a4f0789!  I have been https://chrisbt.me/posts/nps-radius-aadj-2/ to keep my on-prem infrastructure running with my cloud-joined devices but it's too complicated and this demands a simple answer.  Sadly I'm not sure this is it - why did Microsoft call out the lack of support for on-prem wifi with cloud-joined devices and then only provide half a solution?  PKI is great but it won't actually authenticate devices or users.  I'm also keen to see the specifics of the suggested wifi integration since I have successfully deployed my own Azure-hosted PKI with https://www.scepman.com and there's a chicken & egg problem with certificate deployment that nobody at Microsoft has been able to give me an answer to.

  • JoeH45's avatar
    JoeH45
    Iron Contributor
    Nov 15, 2023

    It's part of the "Intune Suite" add-on, so I think you can draw your own conclusion. 🙂