Skip to content

Commit 494022b

Browse files
authored
Merge pull request #6117 from Brenduns/feedback-scep-cert-note
Cert connector and cert requierment clarification
2 parents f465ec5 + b8e4342 commit 494022b

1 file changed

Lines changed: 7 additions & 2 deletions

File tree

memdocs/intune/protect/certificates-scep-configure.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ keywords:
55
author: brenduns
66
ms.author: brenduns
77
manager: dougeby
8-
ms.date: 11/02/2021
8+
ms.date: 11/15/2021
99
ms.topic: how-to
1010
ms.service: microsoft-intune
1111
ms.subservice: protect
@@ -234,13 +234,18 @@ The following sections require knowledge of Windows Server 2012 R2 or later, and
234234

235235
### Create the client certificate template
236236

237-
The Certificate Connector for Microsoft Intune requires a certificate with the *Client Authentication* Enhanced Key Usage and Subject name equal to the FQDN of the machine where the connector is installed. A template with the following properties is required:
237+
> [!NOTE]
238+
>The following certificate is not used with the Certificate Connector for Microsoft Intune. This information is provided for those who have not yet replaced the older connector for SCEP (installed by NDESConnectorSetup.exe) with the new connector software.
239+
240+
The Microsoft Intune Connector requires a certificate with the *Client Authentication* Enhanced Key Usage and Subject name equal to the FQDN of the machine where the connector is installed. A template with the following properties is required:
238241

239242
- **Extensions** > **Application Policies** must contain **Client Authentication**
240243
- **Subject name** > **Supply in the request**.
241244

242245
If you already have a template that includes these properties, you can reuse it, otherwise create a new template by either duplicating an existing one or creating a custom template.
243246

247+
248+
244249
### Create the server certificate template
245250

246251
Communications between managed devices and IIS on the NDES server use HTTPS, which requires use of a certificate. You can use the **Web Server** certificate template to issue this certificate. Or, if you prefer to have a dedicated template, the following properties are required:

0 commit comments

Comments
 (0)