Contents

Introduction

Overview

Prerequisites

Umbrella Dashboard

MS Intune Console

Introduction

This document describes the configuration of Umbrella certificate provisioning with MS Intune.

Overview

This configuration guide covers the elements required to provision the Umbrella Root CA via MS Intune.

Prerequisites

- Umbrella Dashboard Access

- Umbrella Root CA

- MS Intune Console access

Umbrella Dashboard

1. Access to your Umbrella Dashboard under Deployments > Configuration > Root Certificate and download the Umbrella Root CA:

blobid0.png

MS Intune Console

1. Access to your MS Intune MDM and go under Devices > Configuration Profiles > Create Profile > Select Platform:
86b492a7fb03fb72fa2c255ed5f34309fc7427aee918937b6990a66f956dc9ac.png

2. Specify the “Profile Type” and use “Templates” and look for “Trusted Certificate” and click Create:
ca00d2c34ecac4f6fe2584d61b9c8a9832c458d7c083e0aabb532b8c8ebcd7aa.png

3. Enter a meaningful name for the Trusted Certificate profile and click Next.
dfd78f03070787c9ffc4c6c968929d7a12be36429590740ed27641144cf143cf.png

4. Upload the Umbrella Root CA and specify the Destination Store and click Next:
a318563a22a600910b206f01cdfeb483ccc04cb0e15a1757c48e663cfe234ec0.png

93effe94c92c3b063c406e89c4b6d0f759cb8c5d606302e3701b702b1a8cb213.png

5. Specify the group of user/devices you want to assign the Umbrella Root CA.
c436635d3e0dce29ec76802ffb26e604964abe08862c00ec25866dbf4a9d5b95.png

6. Optionally, specify “Applicability Rules” and click Next.

7. Review the configuration has been properly performed and then click Create.
6329621f732c63ec97b6ef656b78dc1c392fe976105a0c3dbb7a779b945ba7e8.png

8. The profile is created.

40c213cc1de22637d88e671a7074d58426573aed1f2fb7ebfda4bc338a691d84.png

9. Click on the profile to navigate to the "Overview page", where you can check the assignment status and the number of devices that have Umbrella Root CA implemented.
24b011d4b760c8245d7a4363e885857dea9881cb4ef0a683b83024e4e618ac9c.png

10. You an also click on the “Device Status” section to confirm the devices that have been successfully deployed.
cadac2eb3017c37d68f0f8aa8230508ea33777afb93250291384962555a4de2b.png

11. You can also confirm the installation on the end device Root CA store:
a9e8eaebad6df501ad7627dbc87f5ea6cf9488b273925c5277fbf8a396ae1a49.png