This presentation covers common and risky misconfigurations customers make when setting up their PKIs and NDES in rolling out MS Intune. Jake will then get into the details of misconfigurations that can leave companies vulnerable to attacks and ways to address them. TOPICS COVERED - How do Intune and NDES work together - Top mistakes and misconfigurations made in setting up InTune with NDES. - Risks and severity associated with NDES/InTune misconfigurations How to fix and avoid these costly misconfigurations

1. Common And Risky MS
Intune And NDES
Misconfigurations And
How to Fix Them
Jake Grandlienard,
Senior PKI Solutions Consultant

2. Agenda Intros
NDES and MS Intune overview
Mistakes and misconfigurations
Risks and impact
Tips to avoid and fix

3. W H AT D O E S P K I S O L U T I O N S D O ?
We are the world’s foremost specialists
providing Public Key Infrastructure (PKI)
products, services, and training to give
organizations confidence in their identity
and encryption systems
70+
Years of
experience
250+
Projects
316
Clients

4. Overview of NDES And Microsoft
Intune Components.

5. Certificate Authority
NDES Server
Azure App. Proxy
Windows 10/11
Internal Network
Intune
certificate profiles
Microsoft
Azure
Microsoft Intune
iPhone Android
Intune
Certificate Connector

6. While Setting Up MS Intune With
NDES.
Top Mistakes And Misconfigurations

7. 1
Over granting of
permissions for build
(with no cleanup)
T O P M I S T A K E S

8. 2NDES signing certificate
template configuration
T O P M I S T A K E S

9. 3Certificate template
configuration for certs to
be issued
T O P M I S T A K E S

10. 4Requirements for NDES
use cases
T O P M I S T A K E S

11. MS Intune And NDES
Misconfigurations.
Risks and Severity Associated With

12. 1Too much focus on Intune
alone
R I S K S A N D S E V E R I T Y

13. 2Signing certificate
expiration
R I S K S A N D S E V E R I T Y

14. 3Client certificate template
permissions
R I S K S A N D S E V E R I T Y

15. 4Single points of failure
R I S K S A N D S E V E R I T Y

16. Tips To Avoid And Fix Mis-configurations

17. 1Review NDES server
configuration after build
completion
T I P S

18. 2Move from default signing
certificate template to
updated templates
T I P S

19. 3Review client certificate
template permissions and
properties
T I P S

20. 4
Prepare for the issues
Signing certificate
renewals,
CA migrations,
Single Points of Failure
T I P S

21. How can PKI Solutions
Help?

22. NDES And
MS Intune
Consulting
Special
1 . I n t ro d u c t i o n t o C e r t i f i c a t e s
& K e y s
2 . P K I I n - D e p t h
3 . A d v a n c e d A D C S
Free 2 Online Training
Courses ($6000 Value)
With Purchase Of
B L O C K O F 4 0 H O U R S O R
M O R E O F C O N S U LT I N G
For details contact:
Carolyn Ballo, Client Relationship Manager
carolyn@pkisolutions.com

23. Our Next Webinars
Quarterly Update:
PKI Spotlight What’s New
How to use PKI maturity framework and
risk mitigation to communicate the
business value of investing in PKI

24. Questions?
Email: info@pkisolutions.com
Phone: +1 (971) 231-5523
Web: https://pkisolutions.com