Intune requirements

You must meet the following requirements to automate MDM Intune enrollment with a PKIaaS gateway.

• PKIaaS account requirements
• Certificate authority requirements
• Microsoft Azure requirements
• Operating system requirements
• Encryption algorithm requirements
• TLS Cipher requirements

PKIaaS account requirements

You need an Entrust PKIaaS account with privileges to create an issuing certificate authority.

Certificate authority requirements

Make sure you have a subordinate CA with a profile of the intune group. You can either:

• Create a new CA with this group, as explained in Creating an issuing subordinate CA.
• Add this group to an existing CA, as explained in Selecting CA profiles.

Microsoft Azure requirements

You need a Microsoft Azure account with privileges to create and configure an Intune application.

Operating system requirements

This release of the Intune automated enrollment is tested with devices running the following operating systems.

For more details on the supported operating systems, please check the Microsoft documentation:

https://learn.microsoft.com/en-us/mem/intune/fundamentals/supported-devices-browsers

Encryption algorithm requirements

The Intune automated enrollment with a PKIaaS gateway supports the following encryption algorithms.

• aes128-CBC-PAD
• aes128-GCM
• aes256-CBC-PAD
• aes256-GCM
• desCBC
• des-ede3-cbc
• id-RSAES-OAEP
• rsaEncryption

TLS Cipher requirements

Enrollment URLs support the following TLS Ciphers.

• ECDHE-RSA-AES128-GCM-SHA256
• ECDHE-RSA-AES256-GCM-SHA384