Upload Certificates for macOS Endpoints via Microsoft Intune

1. On the Microsoft Intuit admin center, navigate to DevicesmacOSConfiguration.
2. Click CreateNew Policy.
3. Set the Profile type to Templates.
4. Make one of the following selections:

   • For root CA, select Trusted certificate.
   • For SCEP certificate, select SCEP certifcate.

5. Click Create.
6. Specify the following fields based on the selected certificate.

   Certificate Type	Information to be Specified
   Root CA	Enter a name and description and click Next. Specify the deployment channel. Select the certificate file. Assign to appropriate users and groups and click Next. Review the summary and click Create.
   SCEP Certificate	Enter a name, description, and other mandatory information such as the extended key usage and deployment channel. Upload the associated root certificate that can be printed as the issuer of this SCEP certificate. Specify the Subject name format, validity period, Key Usage, Key size, and SCEP Server URL. Click Next. Assign to appropriate users and groups and click Next. Review the summary and click Create.