Looking for a Cisco ISE configuration to work with Microsoft Intune

[latenaite2011]

Hey everyone,

Looking for a configuration guide or best practice setting for Cisco ISE policy to work with Microsoft Intune using EAP-TLS.

Thanks!

LN

[marce1000 · Accepted solution]

  - FYI : https://docs.microsoft.com/en-us/troubleshoot/mem/intune/integrate-cisco-ise-intune

 M.

[latenaite2011]

Thanks Marce1000 for the reply.

Will this work with the Microsoft CA Server upgraded to SHA2?

[hslai]

Also see How to: Integrate Cisco ISE MDM with Microsoft Intune (Cisco Community) by one of our TMEs.

[craiglebutt · Accepted solution]

hi

Don't know why Microsoft can't make a API for it, specially as change are made.

Had to reconfigure this twice, these are the certs required

Baltimore CyberTrust Root,

Microsoft RSA TLS CA 01

DigiCert SHA2 Secure Server CA

DigiCert Global Root CA

Cheers, hope it helps

[hslai]

Criag:- Usually ISE needs trusting the root CA certificates only because the web servers of the API endpoints should send the full chains.

https://aka.ms/AzureCertUpdate has info on Azure TLS cert changes.

[networks-at]

Spent a good while importing certs into ISE and changing graph URL's only to find our ISE app in Azure needed AAD graph permissions (should have had by default apparently according to Azure support) as well as Microsoft Graph/Intune permissions that is in the documentation.