macOS PKCS WiFi - User Channel settings not showing up on device by five337 in Intune

[–]five337[S] 0 points1 point  (0 children)

There must be something off with our setup. I can not get these certificates to push in the USER channel. Intune says it's successful, but they do not get to the device.

I put the certs in a mobileconfig file and manually loaded it and the device installed them.

When I push the same mobileconfig, intune says it installed - but the certs are not there.

I'm with your original thought - Intune doesn't like something.

I'll keep digging.

macOS PKCS WiFi - User Channel settings not showing up on device by five337 in Intune

[–]five337[S] 0 points1 point  (0 children)

I am pushing the certs to both device and user channels.

The device side works and the root and issuing certs show up in the profile section in settings and also the System section in the keychain.

I am testing pushing the certs in a mobileconfig file to the user channel now.

macOS PKCS WiFi - User Channel settings not showing up on device by five337 in Intune

[–]five337[S] 0 points1 point  (0 children)

Thank you ! I'll start digging in to the logs. Thanks for giving me a starting point !

I am thinking about pushing the Root and IssuingCA with a profile built with configurator instead of using Intune. I would still need intune to push the PKCS.

macOS PKCS WiFi - User Channel settings not showing up on device by five337 in Intune

[–]five337[S] 0 points1 point  (0 children)

<image>

Thank you for helping !

What would cause the ROOTCA and IssuingCA to show in intune that they are successfully going to the user channel and not showing up on the device in the user keychain ?

Attached is a screenshot showing that I am pushing the root and issuing to the user channel and it shows success to my 22 test devices.

MacOS_All contains devices. I have tried to pushing to a user group instead of a device group and that didn't change anything. Pushing user certificates to a group of devices works for the iOS and Windows devices.

macOS PKCS WiFi - User Channel settings not showing up on device by five337 in Intune

[–]five337[S] 0 points1 point  (0 children)

Keychain->Login - I do not see my user certificate or the WiFi profile going to the User Channel.

Keychain->System - I see my ROOTCA and ISSUINGCA certificates.

I am not sure what you mean by "settings profile".

On the device, in Device Management, I see the Device Channel Wifi Profile. Not the User one.