This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi,
we want to switch from our local GPOs to Intune "only".
We have the following setup for wired and wireless auth.
Computer certificate (own PKI on prem) against NPS server with checking the Root CA certificate. Automatic selection of cert.
How can we transfer these settings to Intune? I can select a CA but it also wants me to select a PKCS profile - the certificates are already issued to these clients.
Doc used: https://video2.skills-academy.com/en-us/mem/intune/configuration/wi-fi-settings-windows
Basically, i want to transfer these settings:
Is there a way to do this or do i need "new" certificates?
BR
Stephan
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
@StephanG, Thanks for posting in Q&A. From your description, i know you want migrate GPOs to Intune policies. Based as I know, you can use Group Policy Analytics, import your GPOs, it will analyze your imported GPOs, and shows the settings that are also available in Microsoft Intune. For the settings that are available, you can create a Settings Catalog policy, and then deploy the policy to your managed devices. Here is a link with more details for yoru reference:
https://video2.skills-academy.com/en-us/mem/intune/configuration/group-policy-analytics-migrate
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Thanks Crystal - we already used this, but this does not answer my question if i can use existing certificates for authentication
@StephanG, Thanks for the reply. If the WiFI profile is deployed via Intune, it can't use the previous existing certificate but only the SCEP or PKCS client certificate profile that is also deployed via Intune.
https://video2.skills-academy.com/en-us/mem/intune/configuration/wi-fi-settings-macos