Android Capsule VPN Intune User cert expiration

D_W — Mon, 14 Oct 2024 07:42:16 GMT

Hi Mates,

we deploy Capsule Android VPN on our mobiles.
For authentication we use client certificates.
Now we face the situation that the client certs expire and we want to perform this as smooth as possible for the users.

1st issue is that weeks before the expiration the user sees a warning about that. That triggers the user to create a ticket...

2nd issue is that the cert will not be replaced automatically although a new cert is already deployed on the device. So the user must manually choose the cert.

How can we avoid these situation by hiding the warning message and set the new cert automatically?
I assume it is possible by set the correct config key values but we cannot find the keys description nor a full list of possible keys. (Some) Keys are shown in sk170320 but are these all keys and what can we do with that keys?

Thx,
David

Re: Android Capsule VPN Intune User cert expiration

PhoneBoy — Mon, 14 Oct 2024 19:09:48 GMT

It looks like the certificate is specified on the MDM side in the App (specifically setting the Certificate Alias value).
This is mentioned both in sk170320 and here: https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-android

topic Android Capsule VPN Intune User cert expiration in SASE and Remote Access

Android Capsule VPN Intune User cert expiration

Re: Android Capsule VPN Intune User cert expiration