This guide provides a monitoring-only approach using Microsoft Intune Remediations (Proactive Remediations). The detection script collects Secure Boot and certificate status from each device and reports it back to the Intune portal — no remediation action is taken on devices.

Certificates are moved to the device via email. You will need to export a password-protected .pfx file, and email it to yourself. Then tap on that .pfx file to install it onto the device/Outlook mobile. The following image shows how manual certificate delivery works in iOS.

Microsoft Intune delivers certificates automatically to Outlook for iOS. To obtain or renew your certificates, please follow the instructions in the notification or email you received from Company Portal.

Plan and perform Secure Boot certificate updates across your device fleet through preparation, monitoring, deployment, and remediation. In this section.

On iOS, certificates are stored in the publisher keychain. On Android, they are stored in the system keychain.

To resolve this issue, install your Enterprise Root CA Certificate on the iOS Device. You can do this manually or by using the Apple Configurator. The cause of each message is slightly different, but both errors are caused by the inability to verify the authenticity of a certificate or certification authority.

PetitPotam takes advantage of servers where Active Directory Certificate Services (AD CS) is not configured with protections for NTLM Relay Attacks. The mitigations below outline to customers how to protect their AD CS servers from such attacks.

We would like to show you a description here but the site won’t allow us.

For iOS, you'll first need to install TestFlight on your iOS device. You can find it here or in the App Store. Once TestFlight is installed, you can join from your device. You'll then be able to download and install our beta app via TestFlight.

When you send a digitally-signed macro or document, you also send your certificate and public key. Certificates are issued by a certification authority, and like a driver’s license, can be revoked.