MD-102 · Question #241
You have computers that run Windows 10, are joined to Azure Active Directory (Azure AD), and are enrolled in Microsoft Intune. You have an Azure web app named App1. App1 only allows connections over…
The correct answer is B. Simple Certificate Enrollment Protocol (SCEP) certificate. A SCEP (Simple Certificate Enrollment Protocol) certificate profile in Intune enables devices to automatically enroll and receive client certificates from an on-premises CA via an NDES/SCEP proxy. When App1 requires mutual TLS or client certificate authentication using the…
Question
You have computers that run Windows 10, are joined to Azure Active Directory (Azure AD), and are enrolled in Microsoft Intune. You have an Azure web app named App1. App1 only allows connections over HTTPS. App1 uses a certificate from an on-premises certification authority (CA). You need to ensure that the computers can connect to App1 from Microsoft Edge. Which type of device configuration profile should you create in Microsoft Endpoint Manager?
Options
- Atrusted certificate
- BSimple Certificate Enrollment Protocol (SCEP) certificate
- Cimported public key pair (PKCS) certificate
- Dpublic key pair (PKCS) certificate
How the community answered
(23 responses)- A13% (3)
- B74% (17)
- C9% (2)
- D4% (1)
Explanation
A SCEP (Simple Certificate Enrollment Protocol) certificate profile in Intune enables devices to automatically enroll and receive client certificates from an on-premises CA via an NDES/SCEP proxy. When App1 requires mutual TLS or client certificate authentication using the on-premises CA, SCEP profiles automate the delivery of those certificates to each device, allowing Microsoft Edge to present the required certificate during the HTTPS connection. A Trusted Certificate profile (which deploys the root CA certificate) is a prerequisite but alone does not enable client authentication. PKCS profiles are an alternative enrollment method; SCEP is the standard choice when an on-premises CA and NDES are in use.
Topics
Community Discussion
No community discussion yet for this question.