Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Microsoft Intune Enhances PKCS Certificate Issuance with SID Support

Microsoft Intune Enhances PKCS Certificate Issuance with SID Support

Written By Anoop C Nair
Last Updated October 7, 2024
Posted In Intune
SHARE

Microsoft Intune Enhances PKCS Certificate Issuance with SID Support! The PKCS certificate issuance process in Microsoft Intune has been updated to meet the Security Identifier (SID) information requirements outlined in KB5014754.

This update introduces an Object Identifier (OID) attribute that includes the user or device SID within the certificate. It is available in the Certificate Connector for Microsoft Intune, version 6.2406.0.1001, and applies to users and devices synced from Active Directory to Microsoft Entra ID.

Microsoft Intune has introduced new working time settings for App Protection Policies, allowing organizations to limit app access and mute notifications outside working hours. This gives businesses more control over app usage and helps reduce distractions during non-working hours.

Microsoft Intune has added a new Update button in the Enterprise Application Management section, making it easier to update apps. This enhancement simplifies the process of managing and keeping apps up to date. The Intune catalog has also been updated with a more user-friendly experience, helping IT administrators manage apps more efficiently.

Patch My PC

What is the New Update for PKCS Certificate Issuance in Microsoft Intune?


The update enhances the PKCS certificate issuance process to support Security Identifier (SID) information as required by KB5014754.

Which Version of the Certificate Connector includes this Update?


This change is available in the Certificate Connector for Microsoft Intune, version 6.2406.0.1001.

Microsoft Intune Enhances PKCS Certificate Issuance with SID Support

The update for PKCS certificate issuance in Microsoft Intune with version 6.2406.0.1001 introduces support for Security Identifier (SID) information, as outlined in KB5014754. An object identifier (OID) attribute containing the user or device SID is now added to the certificate when issuing certificates.

KB5014754 is a Microsoft update that introduces changes to certificate-based authentication on Windows domain controllers to enhance security and mitigate specific vulnerabilities.

  • Sign In to Microsoft Intune Admin Center.
  • In the left navigation pane, select Tenant Administration.
  • Under Tenant administration, click on Connectors and Tokens.
  • Then, select Certificate connectors.
  • Click on Add to start the process of adding a new certificate connector.

Note! If you don’t see the new feature, you may use an older version of the Certificate Connector or haven’t updated the certificate profiles as needed. Ensure the latest version is installed and configured correctly in the Intune portal to access the new functionality.

Microsoft Intune Enhances PKCS Certificate Issuance with SID Support - Fig.1
Microsoft Intune Enhances PKCS Certificate Issuance with SID Support – Fig.1

SID Information in Certificates

The update includes a feature that embeds the SID (a unique identifier for users or devices) in the certificate. This is required for certificates issued to users or devices synced from Active Directory on-premises to Microsoft Entra ID (formerly Azure AD).

SID update availabilityDetails
User CertificatesThe update applies to user certificates on all platforms.
Device CertificatesThe update specifically applies to device certificates on Microsoft Entra hybrid joined Windows devices (devices connected to both Active Directory and Microsoft Entra ID).
Microsoft Intune Enhances PKCS Certificate Issuance with SID Support – Table 1

How to Get this Update

Let’s discuss how to get this update. The table below will help you to see more details.

How to Get This UpdateDetails
Install or Update the ConnectorYou need to install or update to the Certificate Connector for Microsoft Intune, version 6.2406.0.1001. Once updated, the connector will automatically handle the inclusion of SID data in issued certificates.
Microsoft Intune Enhances PKCS Certificate Issuance with SID Support – Table 2

Simple Steps to Check and Apply the Update

PKCS certificates help securely manage identities and ensure trust in digital communications. PKCS, which RSA Security LLC developed in the 1990s, stands for Public Key Cryptography Standards. One commonly used format is PKCS#12, also known as PFX.

  • Make sure you are using version 6.2406.0.1001 of the Certificate Connector for Intune.
  • Update your PKCS certificate profiles to include the new OID attribute with the SID information.
  • Assign the updated certificate profiles to the relevant users or devices synced from Active Directory to Microsoft Entra ID.
Microsoft Intune Enhances PKCS Certificate Issuance with SID Support - Fig.2
Microsoft Intune Enhances PKCS Certificate Issuance with SID Support – Fig.2

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP from 2015 onwards for 10 consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read