Trusted Root

This is only required if you are using a RADIUS server certificate that was issued by a CA that your clients do not already trust. For example, this is not needed if you are bringing your own server certificate issued by SCEPman.
Part 1: Download the RADIUS Server Certificate
When downloading the Server certificate, use only the green-marked certificate. This will download the root CA certificate of the issuing CA.
Part 2: Adding a Trusted Certificate Profile for your Clients 
Ensure, you have reviewed Part 1.
1.Log in to your Azure portal​
2.Navigate to Microsoft Intune and click Device and subsequently Configuration profiles
3.Then click Create profile
4.Select the correct Platform for your device
5.Search the Profile type templates for Trusted certificate and select it
6.Click Create and provide a descriptive name and optional Description
7.In the second step, upload the *.cer file containing the RADIUS server certificate/trusted root the server certificate was signed with.
​

Last modified 1mo ago