question

AdamNesemeier-0404 avatar image
0 Votes"
AdamNesemeier-0404 asked Mikeb-9853 answered

PKCS Certificates failing to install on Windows 10

I have a two configuration profiles setup to deploy a user and computer certificate via Intune/MEM. I can see in the CA the certificates being issued to the server that hosts the connector and on the connector server I see the PFR file in the "Succeed" folder and none in the "Failed" folder. It runs in to an issue when it tries to install the on the Windows 10 computer. I am getting the following errors in the Event viewer, I get event ID 310 and then 404 for each cert trying to install. I have a ticket open with Intune support but have not had any luck with them.

PFX: Certificate Install. Status: 3BB69CD3-8032-4E16-9F83-4D03C65CD715-2021398501, Friendly Name: (), Thumbprint: (The requested operation is not supported.).

MDM ConfigurationManager: Command failure status. Configuration Source ID: (3C1ED987-FE3A-499E-AE68-148693C75224), Enrollment Name: (MDMDeviceWithAAD), Provider Name: (ClientCertificateInstall), Command Type: (Add: from Replace or Add), CSP URI: (./Device/Vendor/MSFT/ClientCertificateInstall/PFXCertInstall), Result: (The requested operation is not supported.).

mem-intune-device-configurations
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DEFredEricS avatar image
0 Votes"
DEFredEricS answered

Hi Adam,

were you ever able to resolve the problem and if yes, what was the issue? Currently facing the same problem.

Cheers,

Fred

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Mikeb-9853 avatar image
0 Votes"
Mikeb-9853 answered

We had the same issue, same exact error. I had the template cryptography minimum key size set to 4096 and was getting that error. I bumped it down to 2048 and the next try worked as expected. I got “the operation completed successfully” after thumbprint and the cert was in the computer store.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.