Connectivity issues may occur on client computers when the following conditions are true:
The client computers use Microsoft Intune and have the automatic root certificate mechanism disabled.
The Baltimore CyberTrust Root certificate is not installed.
To resolve this problem when the automatic root certificate update mechanism is disabled on a client computer, install the latest root certificates to make sure that the client computer is up to date and secure.
You can use the Microsoft Update Catalog to find the latest root certificate updates. You can search for "root update" or the Microsoft Knowledge Base article number for the Windows Root Certificate Program (KB931125) and then download the latest root update package. Root update packages are cumulative. Therefore, you have to install only the latest package to receive all root certificates in the program.
For more information about the root certificate program and about other ways to install the package, click the following article number to view the article in the Microsoft Knowledge Base:
Root certificate update mechanisms are available in different versions of Windows. This includes the automatic root update mechanisms. For more information about how to update the root certificate list in different versions of Windows, click the following article number to view the article in the Microsoft Knowledge Base:
By default, the automatic root update mechanism is enabled in different versions of Windows. However, if this mechanism is disabled, and if the clients do not have the Baltimore CyberTrust Root certificate installed, connectivity issues with Microsoft Intune may occur. Clients may no longer be able to access the Microsoft Intune infrastructure to receive updates, policies, and other such resources. Therefore, the clients may no longer be up to date and secure. New enrollments on such clients may also have issues.