Automatic connection to Wi-Fi network using Intune Enrollment Certificate

Question

Level 1

4 points

Automatic connection to Wi-Fi network using Intune Enrollment Certificate

I'm testing a .mobileconfig profile with the intention of deploying it to macOS devices via Intune. It's meant to connect to a Wi-Fi network using certificates with Aruba. I want the connection to the Wi-Fi network to use the Intune enrollment certificate and for it to be selected automatically without requiring any user interaction.

Whether I load the .mobileconfig profile using Apple Configurator or deploy it via Intune, the first time I manually connect to the Wi-Fi network, it always prompts me to select the certificate. After that, the Wi-Fi connection is saved and future connections no longer require user input.

I know that automatic connection is possible if a SCEP or PKCS certificate is also deployed via Intune, but I'm not even sure if the same can be achieved using the Intune enrollment certificate.

Has anyone managed to configure this scenario?

MacBook Pro (M3, 2023)

Posted on Jun 24, 2025 04:27 AM

Reply

Answer 1

Jun 24, 2025 07:28 AM in response to Aginako

I am not an expert on using a certificate to log in, but you should read about 802.1X, to see if that applies to you.

Apple provides this article:

Connect Apple devices to 802.1X networks - Apple Support

Reply

Answer 2

Aginako Author

Level 1

4 points

Jul 10, 2025 12:47 AM in response to Grant Bennet-Alder

Hello,

after a few days away, I’ve returned to this matter. The link actually hasn’t been very useful in my case because I'm trying to get the device to automatically select the Intune enrollment certificate for Wi-Fi authentication, and that’s not mentioned at all. I know this scenario is possible in Windows—we’ve managed to do it.

I’ve tried some solutions found online to force the automatic selection of the certificate, but without success.

On the other hand, I’ve read that due to macOS’s inherent security, the first time you connect to a Wi-Fi network you’re required to manually specify the certificate. However, I haven’t found this confirmed in any official sources, so I’m still unclear whether my scenario is even possible.

Thanks and best regards.

Reply