Microsoft Intune Certificate Revocation

ENTERPRISE

The Microsoft Intune Certificate Revocation service worker makes it possible for EJBCA to revoke certificates via Intune. Given an Intune tenant, the service worker pulls revocation requests from Microsoft Intune and performs certificate revocation internally.

The following lists available worker settings.

Setting	Description
Application ID from Azure	Azure Application ID obtained for this SCEP server.
Application API Secret from Azure	Azure Application API Key obtained for this SCEP server.
Intune Tenant	Intune Tenant Identifier obtained for this SCEP server.
Provider Name and Version	Free text field used to identify this EJBCA instance. For example ''EJBCA 7.6.0 Enterprise"
Maximum Number Of Revocation Requests to Process Per Period	Maximum number of revocation requests retrieved each time the service worker executes.
Peer that will connect to Intune	The Peer connector used if revocation requests should be dispatched through a Peer connected RA instance. If local is selected, the CA instance which the service worker runs on will connect to Intune directly.
Issuing CAs to check for revocations	The CAs to query revocations for. Multiple CAs can be selected.

The Microsoft Intune Certificate Revocation worker must be configured on a CA instance. However, revocation requests can be dispatched through an RA.