Cloud Managed Networks

Hey airheads, i'm struggling to get ipad to enroll via Intune UEM / SCEP to Central NAC. 

have windows working fine. Anybody been able to get this working?

Is this supported?

Yes, this is supported. Central NAC being the SCEP server does not care whether it is windows, iOS, Android etc. Its on Intune to push the profiles and on the devices to do the SCEP enrollment. We have tested and validated Windows, iOS, Android onboarding through the UEM onboarding workflow. UEM Onboarding steps are documented at : https://arubanetworking.hpe.com/techdocs/NAC/central-nac/central-nac-uem-onboarding-intune/

The techdoc shows sample of windows onboarding but the profiles are exactly the same for iOS as well.

thanks for the reply. do you have any validated steps for Android / iOS?

Seem to be stuck at the SCEP cert deployment due to some errors. The enrolment works fine and the Cloud NAC root CA is pushed but the SCEP Cert (both user and device) fail to install due to an error. no data of use in Intune to suggest the problem.

It looks like the cert is being issue by Central NAC as they show up in the Intune Config profile 

For the benefit of anybody following this, it turns out there is a software version dependency for certificate distribution that is different to the enrolment requirements. this means you can enrol a device successfully but cant push certs to it. for me the answer was upgrading to newer iPad OS (26.x).