How to configure BYOCA for Intune Cloud PKI

In this follow up to our first look at Intune Cloud PKI, we walk through the process of using your own certificate authority from Active Directory.

Join the official Discord server

Read more at

Chapters
0:00:00 - No bags
0:00:49 - From the domain
0:01:18 - Create an issuing CA using on-premise Root CA
0:02:57 - Download the signing request
0:05:12 - Upload the signed Root Cert
0:05:36 - Whoops! Missed the chain
0:06:25 - Upload the chain
0:06:57 - Pros and cons

#intune #autopilot #windows10 #windows11 #microsoftgraph #azureadministrator #azure #powershellscripting #powershell #activedirectory #cloudpki#windows365

[Paul-mt-pw]

I too would be interested in AOVPN user certificates via Cloud PKI : is it best to deploy these as shown in this video with BYOCA which has been signed on the domain controller, or is it better to not use BYOCA but create a Cloud PKI root CA which is then added to NTAuthCA store on the DC? I can't see much information on the relative merits

[claydriskill]

You have done a number of Cloud PKI videos. Much appreciated. Can you try one for AOVPN that currently uses on prem server for certificates. Would like to transfer or lift that process to a cloud only certificate. Hope I explained that correctly.

[shabsn]

If we do this, will we be able to deploy wifi certificates to intune machines and will those certificates directly work with our clearpass radius solution, which we are already using with our on prem ca?

[Udtahuateerlelo]

We are using Azure AD and wanted to use BYOCA for Intune Cloud PKI. is this will be same process for it too? as we do not have any on prem AD