topic Cloudpath InTune Integration & SANs in Cloudpath Enrollment System (ES)

Cloudpath InTune Integration & SANs

tobias_heaton — Tue, 16 Apr 2024 15:54:46 GMT

I have successfully used an InTune configuration profile to issue certificates via Cloudpath using a SCEP key. I need to populate the SAN in the certificate Cloudpath issues, but the fields are empty. The InTune configuration is sending the InTune Device ID as a SAN but it would appear Cloudpath is ignoring that in the CSR. Can anyone shed any light on how to configure a SAN in the certificate issued by Cloudpath?

Re: Cloudpath InTune Integration & SANs

vijaykuniyal — Mon, 22 Apr 2024 16:31:11 GMT

Hi @tobias_heaton ,

What do you see as Username in Cloudpath enrollements, you will need to updated the SCEP profile with the SAN.

Please share screenshot of the Intune SCEP profile if possible.

Re: Cloudpath InTune Integration & SANs

tobias_heaton — Mon, 29 Apr 2024 19:13:05 GMT

The InTune SCEP profile is sending the CN which is working fine, and we also configured a SAN field that is not getting populated in Cloudpath. I opened a ticket with Ruckus and was directed to use the advanced settings in the certificate profile, but there is no ability to use enrollment variables in those fields. Cloudpath is simply not capturing the SAN fields set in the InTune configuration. I tried multiple attribute/values pairs in the SAN field, none of which I'm seeing in the Cloudpath request.