question

67868880 avatar image
7 Votes"
67868880 asked 67868880 commented

Windows Hello for Business - Certificate Issue

I am trying to configure the windows hello for business for Azure AD joined device for on-prem SSO and not able to generate the certificate using Intune SCEP profile as our distinguished name is having comma in the CN value. I have found below article which says "Encapsulate the CN value that contains the special character with quotes" but I am not able to find how to use this. Can anyone suggest?



Subject: CN={ {OnPrem_Distinguished_Name}}

Example DN: CN="LastName\, FirstName,OU=UserAccounts,DC=corp,DC=contoso,DC=com"



Work Around: https://docs.microsoft.com/en-us/mem/intune/protect/certificates-profile-scep#avoid-certificate-sign...


azure-active-directorymem-intune-generalazure-ad-connect
hello.png (54.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

CiciWu2-MSFT avatar image
0 Votes"
CiciWu2-MSFT answered 67868880 commented

Add quotes: CN="LastName, FirstName”,OU=UserAccounts,DC=corp,DC=contoso,DC=com"

As the article mentioned, there is a known issue for using SCEP to get certificates when the subject name in the resulting Certificate Signing Request (CSR) includes one of the following characters as an escaped character (proceeded by a backslash )

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I understand that I need to add comma but how can I add it thats the concern.

SCEP profile is only supporting limited values for subject names.

https://docs.microsoft.com/en-us/mem/intune/protect/certificates-profile-scep

Currently I am using below value for subject name
CN={ {OnPrem_Distinguished_Name}}

How can I add the comma in CN? Can you guide me?

6 Votes 6 ·

I have done the research and it is suggested to put quotation marks on CN. As you mentioned, try CN=”{ {OnPrem_Distinguished_Name}}”

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

1 Vote 1 ·

Thank you so much!

It did the trick :)

I was struggling since a week and no one was aware about this.

0 Votes 0 ·