With this Intune certificate profile, the Certificate Connector asks the CA for a certificate and hands it, private key included, to each user or device individually. Its imported variant pushes an existing PFX instead, as is common for S/MIME.
Also called Public Key Cryptography Standards.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains PKCS in context, with comparison tables and the common traps.
Terms in this definition
- Intune
Microsoft's device management service, once branded Microsoft Endpoint Manager. Its compliance policies are what the compliant-device grant in Conditional Access relies on.
- Certificate
Key Vault object holding an X.509 certificate, whose associated key and secret are managed alongside it.
- Index field attributes
Settings applied to each field in an Azure AI Search index:
searchablefor full text,retrievableto return it,filterablefor exact-match$filter,sortable,facetablefor counts, andkeyfor the unique document ID. - Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
- VARIANT
A type for semi-structured data like JSON whose structure isn't fixed, available from Databricks Runtime 15.4. It is preferred to storing JSON as strings but can't serve as a partition column.
- PFX
PKCS #12 file, protected by a password, bundling a certificate with its private key and chain. App Service accepts no other format for private certificate uploads, and it is used to install client certificates for certificate-based point-to-site VPN.
- S/MIME
Signs and encrypts email using certificates. A label configured with the SMimeEncrypt and SMimeSign advanced settings tells Outlook to use it in place of Rights Management protection.
Related terms
- Subject alternative name
The part of a certificate (SAN) that names each host it is good for. Microsoft Tunnel Gateway needs its FQDN or IP address there, and SCEP or PKCS profiles can supply extra values.
- Trusted certificate profile
Delivers a root or intermediate CA certificate via Intune, so certificates from that CA are accepted. Target it at whichever groups also get dependent SCEP or PKCS profiles.