418382 – Microsoft Intune: MacOS user certs to be deployed in user keychain (archived)

Product:

Intune

Platform:

Mac, US Instances, World tenant

Status:

Launched

Change type:

Links:

Details:

We are now announcing a significant enhancement in MacOS: the ability to store certificates in the user keychain. Previously, certificates were automatically stored in the device keychain, regardless of user or device type.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2024-09-27

updated:
2024-12-05

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Certificate Management
If the change is implemented without preparation, users may experience confusion regarding where their certificates are stored, leading to potential access issues for applications that rely on these certificates.
   - roles: IT Support, End Users
   - references: https://techcommunity.microsoft.com/t5/intune-customer-success/macos-user-certs-to-be-deployed-in-user-keychain/ba-p/3651230

User Experience
Users may face disruptions in their workflows as they adapt to the new certificate storage method, potentially leading to increased support requests and decreased productivity.
   - roles: End Users, IT Support
   - references: https://techcommunity.microsoft.com/t5/intune-customer-success/macos-user-certs-to-be-deployed-in-user-keychain/ba-p/3651230

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft Intune has introduced a new feature for MacOS that allows user certificates to be stored in the user keychain instead of the device keychain. To put it simply, think of the keychain as a secure digital wallet where your credentials and certificates are stored. Previously, this wallet was shared by everyone using the device, like a communal safe in an office. Now, each user gets their own personal safe, making it more secure and personalized.

For lawyers, managers, or HR staff, imagine you have a filing cabinet in your office where you keep sensitive documents. Previously, everyone in the office had access to this filing cabinet. With this new change, each person now has their own locked drawer within the cabinet. Only you have the key to your drawer, ensuring that your sensitive documents are more secure and only accessible to you.

This enhancement is particularly beneficial for environments where multiple users share the same device, such as in government or corporate settings. It ensures that user-specific certificates are kept private and secure, enhancing overall security and compliance.