Will Intune PKI support the issuance of S/MIME certificates and corresponding private keys to all registered Intune users?

Would issuing S/MIME still require the Intune PFX connector to safeguard privatekeys before PFX get sent to Intune?

Can Intune PKI issue certificates using modern certificate management protocols such as ACME and CMPv2?

Will Intune PKI support TPM and HSM key attestation?

How can custom OIDs be configured? With PQC on the horizon, will Intune PKI support PQC algo's?

Generating the Root and Issuing CA seems simple enough, how is AIA configured?

__PRESENT