Microsoft Security | Intune | Microsoft Intune MacOs
Managing macOS devices using Microsoft Intune
Pushing Wi-Fi Profile with EAP-TLS to Macbooks from Intune
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 12%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAH%3C/text%3E%3C/svg%3E)
Ahmed Hassan
0
Reputation points
Hi,
I've been working on pushing EAP-TLS Wi-Fi profile settings to our MacBooks to enable 802.1X certificate-based authentication. However, the profiles are not being successfully deployed to the devices.
Note: All MacBooks are not domain-joined, but they are onboarded through the Company Portal.
Has anyone here encountered similar problem. Can you please help me here. See the attached image which contains wi-fi config done on Intune.
Microsoft Security | Intune | Microsoft Intune MacOs
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Pauline Mbabu 1,710 Reputation points Microsoft Employee2025-07-16T15:23:53.47+00:00 Hello @ahmed hassan ,
Thank you for reaching out.
Based on my current search the issue might be due to a mismatch between the deployment channel and the certificate type used in your Wi-Fi profile. Based on this doc https://learn.microsoft.com/en-us/intune/intune-service/configuration/wi-fi-settings-macos
- User Channel must be selected if you're using user certificates (stored in the user keychain).
- Device Channel must be selected if you're using device certificates (stored in the system keychain).If the wrong channel is selected, the profile will silently fail to deploy even though it is assigned.
If this is not the issue, then kindly share any specific error you are getting. You also mentioned having attached a config file (I don't seem to see this attached) so there is no way to see what configurations have been made.
Sign in to comment
Sign in to answer