Configuring Intune in PKIaaS

Create a PKIaaS enrollment workflow configuration for MDM Intune enrollment.

To create an MDM Intune enrollment workflow configuration in PKIaaS:

1. Follow Accessing your instances to log in to the PKIaaS user interface using an account with one of the following roles:

   • Owners
   • Enrollment Workflow Administrators

2. Click Enrollment Workflows in the sidebar.

   

3. Click Add Workflow Configuration.

4. Under Select Enrollment Workflow Type, click MDM and then Intune.

   

5. Configure the following settings.

   • Workflow Configuration Identifier
   • Intune Tenant ID
   • Intune App ID
   • Intune App Key
   • Description
   • Authority Identifier
   • Certificate Profile

6. Click Create.

7. In the confirmation dialog, copy the URL in the SCEP URL field.

   

Workflow Configuration Identifier

Enter a unique identifier for the new configuration in your PKI. This identifier:

• Must contain 2-18 characters.
• Can only include lowercase letters, numbers, hyphens (’-’), and underscores (’_’).

Intune Tenant ID

Paste the Directory (tenant) ID value obtained when Creating an Intune application in Azure.

Intune App ID

Paste the Application (client) ID value obtained when Creating an Intune application in Azure.

Intune App Key

Paste the secret value obtained when Creating an Intune application in Azure.

Description

Enter an optional description of the workflow purpose.

Authority Identifier

Select an issuing subordinate CA with profiles in the intune group.

Certificate Profile

Select an intune CA profile for issuing the enrolled certificates.