Microsoft Security | Intune | Other
Other Intune-related topics, including unsupported scenarios and platform-specific behaviors
Cannot get Root EKUs listed in Microsoft Cloud PKI while issuing Root CA
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 10%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDB%3C/text%3E%3C/svg%3E)
Damon Boyer
45
Reputation points
Attempting to issue Root CA for Microsoft Cloud PKI in Intune Admin Center > Tenant Management. I have purchased one of every type of Intune license there is, including specific Microsoft Cloud PKI for Government. I have several hundred MS365 G5 users, various other 365 licenses. I've tried with a general global admin, with the first primary admin in 365, and with the "owner" billing account, granted global admin. No root EKUs are exposed in the UI during Root CA setup. I only get end-entity EKUs
Microsoft Security | Intune | Other
Sign in to answer