The part of a certificate (SAN) that names each host it is good for. Microsoft Tunnel Gateway needs its FQDN or IP address there, and SCEP or PKCS profiles can supply extra values.
Also called SAN.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Subject alternative name in context, with comparison tables and the common traps.
Terms in this definition
- Certificate
Key Vault object holding an X.509 certificate, whose associated key and secret are managed alongside it.
- SAN
Block storage carried over its own dedicated network, typically iSCSI or Fibre Channel, which gives ESX hosts LUNs to format as VMFS datastores.
- Microsoft Tunnel
Intune's VPN solution: a gateway hosted in containers on Linux. It connects Android Enterprise and iOS/iPadOS devices to resources held on premises, and Microsoft Defender acts as the app on each device.
- FQDN
The full DNS name of a host, zone included, for example www.contoso.com.
- SCEP
A protocol in which a device creates its own private key and asks for a certificate. In Intune, SCEP profiles depend on either Microsoft Cloud PKI or NDES alongside the Certificate Connector.
- PKCS
With this Intune certificate profile, the Certificate Connector asks the CA for a certificate and hands it, private key included, to each user or device individually. Its imported variant pushes an existing PFX instead, as is common for S/MIME.
- VALUES
Returns in DAX the distinct column values, or table rows, still visible after filters are applied, sometimes with an extra blank entry. CALCULATE often takes the result as a table filter.