Configure Umbrella Certificate Provisioning with MS Intune

Available Languages

Download Options

  • PDF     (440.0 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (554.4 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (554.5 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:October 2, 2025
Document ID:225127

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes the configuration of Umbrella certificate provisioning with MS Intune.

    Overview

    This configuration guide covers the elements required to provision the Umbrella Root CA via MS Intune.

    Prerequisites

    • Umbrella Dashboard Access
    • Umbrella Root CA
    • MS Intune Console access

    Umbrella Dashboard

    1. Access to your Umbrella Dashboard under Deployments > Configuration > Root Certificate and download the Umbrella Root CA:

    blobid0.pngblobid0.png

    MS Intune Console

    1. Access to your MS Intune MDM and go under Devices > Configuration Profiles > Create Profile > Select Platform:86b492a7fb03fb72fa2c255ed5f34309fc7427aee918937b6990a66f956dc9ac.png86b492a7fb03fb72fa2c255ed5f34309fc7427aee918937b6990a66f956dc9ac.png

    2. Specify the “Profile Type” and use “Templates” and look for “Trusted Certificate” and click Create:ca00d2c34ecac4f6fe2584d61b9c8a9832c458d7c083e0aabb532b8c8ebcd7aa.pngca00d2c34ecac4f6fe2584d61b9c8a9832c458d7c083e0aabb532b8c8ebcd7aa.png

    3. Enter a meaningful name for the Trusted Certificate profile and click Next.dfd78f03070787c9ffc4c6c968929d7a12be36429590740ed27641144cf143cf.pngdfd78f03070787c9ffc4c6c968929d7a12be36429590740ed27641144cf143cf.png

    4. Upload the Umbrella Root CA and specify the Destination Store and click Next:a318563a22a600910b206f01cdfeb483ccc04cb0e15a1757c48e663cfe234ec0.pnga318563a22a600910b206f01cdfeb483ccc04cb0e15a1757c48e663cfe234ec0.png

      93effe94c92c3b063c406e89c4b6d0f759cb8c5d606302e3701b702b1a8cb213.png93effe94c92c3b063c406e89c4b6d0f759cb8c5d606302e3701b702b1a8cb213.png

    5. Specify the group of user/devices you want to assign the Umbrella Root CA.c436635d3e0dce29ec76802ffb26e604964abe08862c00ec25866dbf4a9d5b95.pngc436635d3e0dce29ec76802ffb26e604964abe08862c00ec25866dbf4a9d5b95.png

    6. Optionally, specify “Applicability Rules” and click Next.
    7. Review the configuration has been properly performed and then click Create.6329621f732c63ec97b6ef656b78dc1c392fe976105a0c3dbb7a779b945ba7e8.png6329621f732c63ec97b6ef656b78dc1c392fe976105a0c3dbb7a779b945ba7e8.png

    8. The profile is created.
      40c213cc1de22637d88e671a7074d58426573aed1f2fb7ebfda4bc338a691d84.png40c213cc1de22637d88e671a7074d58426573aed1f2fb7ebfda4bc338a691d84.png

    9. Click on the profile to navigate to the "Overview page", where you can check the assignment status and the number of devices that have Umbrella Root CA implemented.24b011d4b760c8245d7a4363e885857dea9881cb4ef0a683b83024e4e618ac9c.png24b011d4b760c8245d7a4363e885857dea9881cb4ef0a683b83024e4e618ac9c.png

    10. You an also click on the “Device Status” section to confirm the devices that have been successfully deployed.cadac2eb3017c37d68f0f8aa8230508ea33777afb93250291384962555a4de2b.pngcadac2eb3017c37d68f0f8aa8230508ea33777afb93250291384962555a4de2b.png

    11. You can also confirm the installation on the end device Root CA store:a9e8eaebad6df501ad7627dbc87f5ea6cf9488b273925c5277fbf8a396ae1a49.pnga9e8eaebad6df501ad7627dbc87f5ea6cf9488b273925c5277fbf8a396ae1a49.png

    Revision History

    Revision Publish Date Comments
    1.0
    02-Oct-2025
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products