Umbrella Certificate Provisioning via MS Intune

Overview

This configuration guide covers the elements required to provision the Umbrella Root CA via MS Intune.

Prerequisites

• Umbrella Dashboard Access
• Umbrella Root CA
• MS Intune Console access

Umbrella Dashboard

1. Access to your Umbrella Dashboard under “Deployments>Configuration>Root Certificate” and download the Umbrella Root CA:

MS Intune Console

1. Access to your MS Intune MDM and go under “Devices>Configuration Profiles>Create Profile>Select Platform”:
2. Then you need to specify the “Profile Type” and use “Templates” and look for “Trusted Certificate” and click “Create”:
3. Enter a meaningful name for the Trusted Certificate profile and click “Next”:
4. Upload the Umbrella Root CA and specify the Destination Store and click “Next”:
5. Specify the group of user/devices you want to assign the Umbrella Root CA:
6. Optionally, specify “Applicability Rules” and click “Next”:
7. Review the configuration has been properly performed and then click “Create”:
8. After the above steps are performed the profile will be created:
9. By clicking on the profile, you will be taken to the "Overview page" in which you can check the assignment status and how many devices it has been successfully implemented:
10. You an also click on the “Device Status” section to confirm the devices it has been successfully deployed:
11. You can also confirm the installation on the end device Root CA store: