iOS 14.x Capsule Connect Certificate

davidlan — Fri, 23 Jul 2021 17:15:22 GMT

Hi all,

we use Intune Azure to Roll Out Capsule Connect on iOS Devices. The App is configured as Per-App VPN and authentication via user certificate. Certificate rolled out by SCEP. This works so far!

Now we want to change the Roll Out of the Capsule Connect App via the Apple Volume Purchase Program but when we do this the Capsule App cannot see the certificate.

Is someone having the same issue or any idea to solve it?

Cheers,
David

Re: iOS 14.x Capsule Connect Certificate

PhoneBoy — Mon, 26 Jul 2021 03:55:00 GMT

There seems to be a hint here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk136492

We can only access certificates that were installed together with the VPN profile.

It can either be a configuration profile, including both the certificate and a Capsule Connect VPN profile that uses this certificate, which is then sent to the device and installed locally, or be pushed from MDM with a Capsule Connect VPN profile referencing the certificate. This way, the certificate is stored in a special keychain that we can access.

My guess is some integration is needed between Intune and the Apple Volume Purchase Plan (which I think is also like an MDM).

topic Re: iOS 14.x Capsule Connect Certificate in SASE and Remote Access

iOS 14.x Capsule Connect Certificate

Re: iOS 14.x Capsule Connect Certificate