Home

macOS SCEP certificate is not stored to login keychain

%3CLINGO-SUB%20id%3D%22lingo-sub-1230485%22%20slang%3D%22en-US%22%3EmacOS%20SCEP%20certificate%20is%20not%20stored%20to%20login%20keychain%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1230485%22%20slang%3D%22en-US%22%3E%3CP%3EWith%20macOS%2C%20Intune%20can%20distribute%20SCEP%20profiles%2C%20and%20we%20can%20specify%20certificate%20type%20as%20%22Device%22%20or%20%22User%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20the%20certificate%20will%20be%20stored%20in%20the%20System%20keychain%20if%20I%20specify%20the%20%22User%22%20certificate%20type.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20it%20occurred%20in%20my%20environment%3F%20And%2C%20it%20is%20a%20spec%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Enayuta%2C%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1230485%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EmacOS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESCEP%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Contributor

With macOS, Intune can distribute SCEP profiles, and we can specify certificate type as "Device" or "User".

 

However, the certificate will be stored in the System keychain if I specify the "User" certificate type.

 

Is it occurred in my environment? And, it is a spec?

 

nayuta,