Home
Services ▾
Managed ServicesYour IT department on demandConsulting ServicesCloud & IT advisory that moves you forwardCo-Managed ITReinforce, not replace, your teamTechnical AssessmentTurn complexity into clarityImplementation ServicesCertified deployments, done rightWorkshopsMigration & AI working sessions
Industries ▾
LegalLaw firms & legal servicesPrivate EquityPortfolio-wide IT & diligenceFinancial ServicesSecure, compliant infrastructureNon-ProfitTech that serves your mission
Resources ▾
BlogInsights & guidesIT BasicsPlain-English fundamentalsResource LibraryFree guides & checklistsPartnersOur technology partners
Company ▾
About UsWho we areMission & CultureWhat drives usFoundersMeet the teamPress & NewsLatest announcements
Hypershift.labs ↗ContactConsultation
Home
Services
Managed ServicesConsulting ServicesCo-Managed ITTechnical AssessmentImplementation ServicesWorkshops
Industries
LegalPrivate EquityFinancial ServicesNon-Profit
Resources
BlogIT BasicsResource LibraryPartners
Company
AboutMission & CultureFoundersPress & NewsHypershift.labs ↗ContactConsultation
← All postsInsights

Simplify Endpoint Security with Microsoft Intune and Microsoft Cloud PKI

Team Hypershift · March 15, 2024

What is Intune Cloud PKI

Intune Cloud PKI is a 100% cloud-based system for managing an organization's public key infrastructure (PKI). PKI certificates validate devices and apps accessing a company's network. These certificates can be created, modified, or revoked as devices, data, and apps move through their lifecycle.

"All of these certificates can now be easily managed in the cloud through a web-based interface. Previously, these certificates needed to be managed via on-premise physical servers."

This shift eliminates significant expenses and technical overhead associated with procuring, maintaining, and managing physical servers, enabling businesses to scale more easily.

Features of Intune Cloud PKI

  • Complete Endpoint Management - Manage certificates in the same software suite as endpoints, creating improved efficiency
  • Reduce Complexity - Streamlined interface allows IT personnel to manage tasks without extensive technical expertise
  • Fast Migration To The Cloud - Implementation and rollout happen significantly faster than on-premise solutions
  • Automate For Efficiency & Security - Automated certificate revocation as devices progress through their lifecycle
  • Certifications For Network Assets - Manages certificates for devices, apps, data, WiFi, VPNs, and other resources
  • Dashboards - Instant insights into endpoint security and certificate infrastructure with filtering capabilities
  • Easier Compliance With Best Practices - Centralized platform helps organizations adhere to security best practices

What to Keep In Mind with Intune & Cloud PKI

Endpoint security represents one of IT's more challenging tasks. PKI management particularly strains smaller businesses lacking dedicated resources. Microsoft Intune and Cloud PKI offer cost-effective solutions for maintaining security while simplifying overall endpoint management. This enables organizations to implement certificate-based architecture as they transition toward passwordless systems.

FAQ: Microsoft Intune & Cloud PKI

Will There Be A Trial Period For Cloud PKI?

Cloud PKI became available March 1st, 2024 on a trial basis, limited to 250 users for 90 days.

How Much Does Cloud PKI Cost?

As a standalone or add-on, Cloud PKI costs $2 per user/per month. It's included with the complete Intune Suite at $10 per user/month.

Can Cloud PKI Use S/MIME Certificates?

S/MIME is supported through certain Intune and Cloud PKI services. Cloud PKI handles SCEP configuration profiles for signing certifications, while Intune imports PKCS certification profiles for encryption.

Can I Use Azure Key Vault With Cloud PKI To Issue Certificates?

Currently, you cannot add Cloud PKI certificate authority to Azure Key Vault for certificate issuance. Microsoft is considering this integration based on demand.

Will Cloud PKI Support Externally, Offline-Created Certificate Authority?

Yes. Cloud PKI fully supports external, offline-created Certificate Authority architecture for businesses requiring redundancy for security or compliance.

How Are Certificate Requests Handled?

During initial release, only devices enrolled through Microsoft Intune using SCEP certificate profiles can request certificates. Future versions may expand certificate request options and protocol support.

What Devices Can Certificates Be Automated For?

Cloud PKI currently supports automated issuing, revoking, and removal of certificates for devices enrolled and managed through Intune. Other certificate types like ACME are under investigation for future releases.