Oct 15 2023 05:59 AM - edited Oct 15 2023 06:01 AM
Howdy!
I'm trying to leverage SCEP (or other potential options) to deploy an Enterprise Wifi profile to macOS devices (non-user based Kiosk devices). Could we still make use of SCEP and would the CA be able to issue device certificates for this purpose ?
Tried the following specifications with no luck so far.
-Root Certificate Deployed
-Intune has pushed both SCEP and Wifi Profiles successfully to the devices
-Devices are Intune Managed (non-user based)
My thinking is that we can't use generic SAN attributes such as email address, UPN here due to the fact that the device has no user account associated? Would URI work ? or the DNS ?
Any guidance on what attributes to use in the SCEP certificate/profile and the CA certificate SANs/CNs would be highly appreciated!
Kev
Oct 16 2023 07:30 AM
Hi @Curious_Kevin16,
to deploy enterprise Wi-Fi profiles to non-user based (kiosk) macOS devices using Intune and NDES, you can use the following steps:
Create a SCEP certificate profile in Intune.
Configure the NDES server.
Configure the NDES server to issue device certificates with the following SAN attributes:
For more information, see Configure NDES for SCEP enrollment: https://learn.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure.
Deploy the SCEP certificate profile and Wi-Fi profile to your devices.
Restart the devices.
Once the devices have restarted, they will obtain a device certificate from the NDES server and use it to authenticate to the enterprise Wi-Fi network.
Here are some additional links for reference:
Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.
If the post was useful in other ways, please consider giving it Like.
Kindest regards,
Leon Pavesic
(LinkedIn)
Nov 13 2023 06:42 PM
Nov 23 2023 06:39 AM
Nov 23 2023 05:50 PM - edited Nov 23 2023 07:08 PM
@Yahiaabdel
Great to hear!.
Would be fantastic to hear a bit more details such as what your scenario was and how you configured the SCEP, Wifi Profile Attributes to solve this.
Thank you!