Aruba ClearPass + Intune: Deploying Certificates with NDES

Part 2 of the ClearPass + Intune series. This video covers the enterprise-grade method EAP-TLS certificate-based authentication using Windows NDES and Microsoft Intune SCEP.Devices connect automatically with no username or password. Certificates are deployed via Intune, ClearPass validates them, checks compliance in real time, and enforces the correct User Role. 📥 Lab Guide + Study Guide (PDF): https://pamodat.gumroad.com/l/gsqwnp 🔗 Full lab guide: letslearnnetwork.com📺 Part 1 (PEAP + periodic sync): https://letslearnnetwork.com/aruba-cl... 📌 WHAT YOU'LL LEARN━━━━━━━━━━━━━━━━━━━━━━ ✅ Windows NDES setup and registry configuration ✅ NDES certificate template for Intune SCEP ✅ Cloudflare Tunnel for public NDES access ✅ ClearPass RADIUS/EAP certificate with SAN ✅ Disabling RSA-PSS in ClearPass (critical fix for Windows 11) ✅ Intune Trusted Certificate, SCEP, and WiFi profiles ✅ ClearPass EAP-TLS service configuration ✅ Live demo — compliant vs non-compliant enforcement ✅ Three troubleshooting gotchas nobody ⏱️ CHAPTERS━━━━━━━━━━━━━━━━━━━━━━ 0:00 Hook 2:30 Part 1 recap 3:22 Windows NDES setup 10:42 Intune certificate profiles 18:59 ClearPass EAP-TLS service 21:38 Live demo 31:16 Troubleshooting gotchas ━━━━━━━━━━━━━━━━━━━━━━ ⚠️ THREE CRITICAL FIXES ━━━━━━━━━━━━━━━━━━━━━━ 1. RSA-PSS Signature Suite — disable in ClearPass Service Parameters 2. NDES challenge password — registry fix required 3. RADIUS certificate SAN — required for Windows 11#motivation #ClearPass #eaptls #microsoftintune #zerotrust #NDES #networksecurity #arubanetworks #letslearnnetwork #motivation #learning #education #educational #educationalvideo #showyourwork 🌐 Blog → https://letslearnnetwork.com💼 LinkedIn →   / tharindu-pamoda-62a5a3a4