802.1x wifi profile

Question

802.1x wifi profile

Handian Sudianto 7,301

Can we automate this wifi setting using intune so the Entra User only click connect without prompting to select connect using username password and pass thru connect using certificate diretly?

User's image

Rahul Jindal 11,636 Reputation points

2026-06-11T07:43:52.5266667+00:00

Yes, you can. First, you must configure your Wi-Fi infrastructure (such as your RADIUS server) to support EAP-TLS authentication using user certificates. Once that is complete, you need to install the Certificate Connector for Microsoft Intune on a local server, linking it to your tenant so it can securely receive certificate requests from Intune and issue them via your Certification Authority.
Handian Sudianto 7,301 Reputation points

2026-06-11T10:49:35.0666667+00:00

Hi..

I'm not asking how to create 802.1x for wifi, i already create and i can connect but when i try connect to the wifi then i gor that picture. Now i just want to know can we make a wifi profile from intune so users only select the ssid and click connect without prompting to ented credential or select the cerificate.

1 answer

Your answer

Rahul Jindal 11,636 Reputation points

2026-06-11T07:43:52.5266667+00:00

Yes, you can. First, you must configure your Wi-Fi infrastructure (such as your RADIUS server) to support EAP-TLS authentication using user certificates. Once that is complete, you need to install the Certificate Connector for Microsoft Intune on a local server, linking it to your tenant so it can securely receive certificate requests from Intune and issue them via your Certification Authority.
Handian Sudianto 7,301 Reputation points

2026-06-11T10:49:35.0666667+00:00

Hi..

I'm not asking how to create 802.1x for wifi, i already create and i can connect but when i try connect to the wifi then i gor that picture. Now i just want to know can we make a wifi profile from intune so users only select the ssid and click connect without prompting to ented credential or select the cerificate.

Answer 1

Yes. Configure an Intune Wi‑Fi Enterprise profile that uses a certificate-based authentication method instead of username/password. When the device already has the client certificate, Windows will connect using that certificate without prompting the user to choose “Connect using a certificate”.

High‑level steps for Windows devices:

Deploy a client certificate to devices
- Use an Intune SCEP or PKCS client certificate profile so each device/user receives a certificate.
Deploy a trusted root certificate
- Deploy a trusted root certificate profile that matches the CA used by the RADIUS/NPS server.
Create an Enterprise Wi‑Fi profile in Intune
- Wi‑Fi type: Enterprise.
- Configure Wi‑Fi name (SSID) and connection options as needed.
- Under Authentication method, select a certificate option instead of Username and Password:
  - SCEP certificate – select the SCEP client certificate profile.
  - PKCS certificate – select the PKCS client certificate profile and the trusted root certificate.
- Optionally configure Certificate server names and Root certificates for server validation so users are not prompted with trust dialogs.

With this configuration, Windows uses the deployed certificate automatically for 802.1X authentication, and users only need to click Connect (or the device can connect automatically) without being prompted to switch from username/password to certificate.

References: