You have a Microsoft 365 E5 subscription and use Microsoft Intune. You plan to implement a Microsoft Cloud PKI solution that will deploy personal user certificates to all Windows devices. What is the

The correct answer is C. 3. Microsoft Cloud PKI uses a two-tier CA hierarchy (Root CA + Issuing CA). To deploy personal user certificates via SCEP, you need three Intune configuration profiles: (1) a Trusted Certificate profile deploying the Root CA certificate, (2) a Trusted Certificate profile deploying t

Submitted by tom_us· Apr 18, 2026Protect devices

Question

You have a Microsoft 365 E5 subscription and use Microsoft Intune. You plan to implement a Microsoft Cloud PKI solution that will deploy personal user certificates to all Windows devices. What is the minimum number of configuration profiles required to support the solution?

Options

How the community answered

(41 responses)

A
15% (6)
B
7% (3)
C
76% (31)
D
2% (1)

Explanation

Microsoft Cloud PKI uses a two-tier CA hierarchy (Root CA + Issuing CA). To deploy personal user certificates via SCEP, you need three Intune configuration profiles: (1) a Trusted Certificate profile deploying the Root CA certificate, (2) a Trusted Certificate profile deploying the Issuing (Intermediate) CA certificate, and (3) a SCEP Certificate profile that requests and installs the actual personal user certificate. Without both trusted CA profiles in the chain, Windows devices will not trust the issued certificate, making 3 the minimum required.

Topics

#Cloud PKI#Certificate enrollment#SCEP profile#Trusted root certificate

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice