Coming to the Microsoft Intune Suite - Microsoft Cloud PKI!

A cloud-based public key infrastructure (PKI) service, Microsoft Cloud PKI will handle all aspects of the certificate lifecycle for Intune managed devices. Adhering to PKI industry standards, simple to setup and manage. No on-premises servers to deploy or manage, no certificate connectors, no firewalls or proxies. We handle all the complexities, standing up a PKI in a matter of minutes. Watch to see how it all works!
This session is part of the Microsoft Technical Takeoff for Windows and Intune. Visit aka.ms/TechnicalTakeoff to skill up with more deep dives, demos, and panel discussions!
--------------------------------------------------------------------------------------------------------------------------------------
❔ Check out the Q&A: aka.ms/TT/CloudPKI
🎓 Learn more about Microsoft Cloud PKI: learn.microsoft.com/mem/confi...
🔖 Bookmark the Microsoft Intune community: techcommunity.microsoft.com/t...
--------------------------------------------------------------------------------------------------------------------------------------
What's covered in this session?
0:00 - Intro
2:39 - Microsoft Cloud PKI features
7:14 - Architecture
10:11 - Demo: the console experience
16:10 - Story board: today, GA, tomorrow…
19:49 - Summary of benefits
20:29 - Deployment approaches
--------------------------------------------------------------------------------------------------------------------------------------
Resources mentioned in this session:
- Device Health Attestation: learn.microsoft.com/windows-s...
- Microsoft Cloud PKI launches as a new addition to the Microsoft Intune Suite: techcommunity.microsoft.com/t...

[@svenhallauer3229]

Hi Bill, great to see you on UA-cam :-)

[@junaiddar2586]

Loved it . Thank you very much.

[@mrnettek]

Excellent. Thank you.

[@glueckkanja]

Thanks!

[@billwells666]

Wish you had weighed in regarding what controls are used in protecting the private keys of the cloud CAs, what FIPS or other standard the Cloud PKI is rated at, etc. etc. - seems like a pretty basic design aspect to showcase.

[@ashy2clasy]

Anyone have experience with entrust with regards to certificates? Would the exact same setup described in this video apply to entrust certs?

[@floriandaminato]

If I replace my NDES/scep in my onprem environnement for Microsoft Cloud PKI, do I need to add a radius server/solution for wifi/vpn auth ?

[@DrMonkeyzZ]

That’s the point of cloud PKI no onprem services needed u get ur certificates from intune.

[@MatazaNz]

@@DrMonkeyzZ @floriandaminato Ths problem is you require on-prem infrastructure to authenticate machine/user certs from the cloud PKI. It's disappointing that there's no offering for that as part of this. You can pay for a cloud-hosted RADIUS, like SecureW2, but why only pay for their coloud RADIUS when they provide the full suite? Cloud PKI, BYOD & Self-service portals, cloud RADIUS.
While this cloud PKI is a great step in the right direction, it leaves much to be desired.

[@MatazaNz]

You do, yes, in some capacity. Whether that's a Microsoft NPS server, or even a FreeRADIUS server, you will need *something* to authenticate and authorise devices on your wifi/VPN. There are other services like SecureW2 that provide a cloud RADIUS you could look into, but that's added cost.

[@cornerstoneww]

Licensing. Is the cost 2.40/device for licensing? Or, is it more of an "technician" or "operator" cost. Meaning, if per device, if I had 100 devices managed by Intune, it'd be $240/mo?