Implementing Intune integration into ConfigMgr 2012 R2 – Enroling a Device

In the second part of this two part series I will be showing you how you can enrol a device within Intune in ConfigMgr.

Part One ‘Implementing Intune integration into ConfigMgr 2012 R2 in a Lab Environment’ is available to view here.

Setting up an iOS Device

To manage Apple iOS devices an APN (Apple Push Notification) certificate is required. To make a request for the certificate you need to open up the ConfigMgr console and navigate to the Administration workspace and select Cloud Services>Microsoft Intune Subscriptions. Right click and choose ‘Create APN certificate request’.

Choose a location to save the certificate request to and click Download.

Sign into the Intune portal with your onmicrosoft.com administrative account.

Once the request has been made click Close.

The certificate will reside in your download location.

Connect to the Apple Push Notification Portal at https://idmsa.apple.com/IDMSWebAuth/login?appIdKey=3fbfc9ad8dfedeb78be1d37f6458e72adc3160d1ad5b323a9e5c5eb2f8e7e3e2&rv=2. Note that it is recommend that you do not use Internet Explorer to do this as there are issues downloading the .pem file. I have tested this on Microsoft Edge and the site does not load properly once logged in. Therefore I am using Google Chrome.

Enter your Apple ID login details. You must create an Apple ID if you do not have one.

Click Create a Certificate

Accept the T’s & C’s

Click ‘Choose file’ and upload the generated request file.

This will create a certificate that is valid for one year. Click Download.

In the ConfigMgr console return to the Administration workspace. Go to Cloud Services>Microsoft Intune Subscriptions. Right click Microsoft Intune Subscription and select Configure Platforms>iOS

Enable iOS enrollment and browse to select the .pem file. I’ve also ticked to be alerted 10 days before the expiration of the certificate. Click Ok. (Note there is a bug with ConfigMgr 2012 R2 SP1 and the alert check box – if using this version do not tick the box)

When checking the APN certificate again in the properties note that you will get the following displayed.

Now that enrolment is configured devices can be enrolled.

Enrol an iOS device

On an iOS device go to the App Store and search for intune. Get the Microsoft Intune Company Portal app.

Once loaded enter a UPN address/password of a synced Intune account

When prompted enroll the device.

To install the profile click Install.

Confirm the install of the profile by selecting Install

Trust the Remote Management prompt

When the profile is installed click Done

To complete the enrolment process select Done

The device is now enrolled successfully

The device is also listed in the ConfigMgr console in the Devices node