Hi Bill, great to see you on KZread :-)

Excellent. Thank you.

Loved it . Thank you very much.

Wish you had weighed in regarding what controls are used in protecting the private keys of the cloud CAs, what FIPS or other standard the Cloud PKI is rated at, etc. etc. - seems like a pretty basic design aspect to showcase.

Licensing. Is the cost 2.40/device for licensing? Or, is it more of an "technician" or "operator" cost. Meaning, if per device, if I had 100 devices managed by Intune, it'd be $240/mo?

Anyone have experience with entrust with regards to certificates? Would the exact same setup described in this video apply to entrust certs?

Thanks!

If I replace my NDES/scep in my onprem environnement for Microsoft Cloud PKI, do I need to add a radius server/solution for wifi/vpn auth ?

@DrMonkeyzZ

6 ай бұрын

That’s the point of cloud PKI no onprem services needed u get ur certificates from intune.

@MatazaNz

5 ай бұрын

@@DrMonkeyzZ @floriandaminato Ths problem is you require on-prem infrastructure to authenticate machine/user certs from the cloud PKI. It's disappointing that there's no offering for that as part of this. You can pay for a cloud-hosted RADIUS, like SecureW2, but why only pay for their coloud RADIUS when they provide the full suite? Cloud PKI, BYOD & Self-service portals, cloud RADIUS. While this cloud PKI is a great step in the right direction, it leaves much to be desired.

@MatazaNz

5 ай бұрын

You do, yes, in some capacity. Whether that's a Microsoft NPS server, or even a FreeRADIUS server, you will need *something* to authenticate and authorise devices on your wifi/VPN. There are other services like SecureW2 that provide a cloud RADIUS you could look into, but that's added cost.