Security

 View Only

  • 1.  Attribute filter query syntax to query every value in a csv

    Posted Dec 12, 2022 08:26 AM
    Hello

    I want to query the Intune extention for every entry in the Subject-AltName-DNS of a client certificate, since one of them is the IntuneID.

    Can someone help me with the syntax for the query?

    %{Certificate:Subject-AltName-DNS} does not do the trick when there are multiple SAN entries in the certificate.

    Thank you for your time.

    Wouter


  • 2.  RE: Attribute filter query syntax to query every value in a csv

    Posted Dec 13, 2022 06:08 AM
    The recommended way is to have the IntuneID set as CN in your certificate enrollment: CN={{DeviceID}}

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Attribute filter query syntax to query every value in a csv

    Posted Dec 13, 2022 07:13 AM
    Thank you for your answer Herman. For most customers, that's the way we work, but this is an exception and the clients also use the certificate for other things, so instead of changing the certificate template, I was looking for a way to filter out the DeviceID that is one of the values in the SAN.

    Is this possible? what type of syntax is the query filter using?
    Original Message


  • 4.  RE: Attribute filter query syntax to query every value in a csv

    Posted Dec 13, 2022 09:45 AM
    I think the recommendation is there for a reason. If it would work through SAN, that would probably have been the recommendation.

    You may open a TAC Support case, and/or check Aruba Innovation Zone if there maybe a feature request for such a feature already. Your Aruba partner or Aruba SE have access to Innovation Zone if you don't have it.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


Related Content