Intune Tunnel Configuration certificate issue.

Question

Hi everyone,

I have configured the Microsoft Intune Tunnel Gateway using an Ubuntu Linux server. I also set up a Certificate Authority (CA) server where I installed the ADCS role to generate the root certificate and TLS certificate by duplicating the Web Server template. Here are the steps I followed:

1. Launch the Certification Authority.
2. Navigate to Certificate Templates > Right-click > Manage.
3. Duplicate the Web Server template.
4. In the General tab, provide a name for the template.
5. In the Request Handling tab, enable Allow private key to be exported.
6. In the Subject Request section, select Supply in the request.
7. In the Security tab, add the computer name that will request the certificate and assign Read and Enroll permissions.
8. Leave all other settings as default, then click Apply and OK.

and then request and export the certificate.

After completing the server-side configuration and other prerequisites, the Intune Tunnel status is showing as Healthy in the Intune portal.

However, when I deployed the VPN profile and trusted root certificate to an Android device (with the Edge browser and Defender app installed), I encountered an issue when opening the Defender app. (attached screenshot below)

Despite multiple reconfigurations, have tried in the RHEL as well but the issue persists. .Could you please help me identify and resolve this problem? I am awaiting your quick response.

Answer 1

@Khushboo, Thanks for posting in Q&A.

Based on the information you provided, all the set ups are fine, and it seems needed to check some logs on your device to find the root cause. With the limitation of Q&A, we suggest opening a support ticket to do the troubleshooting. Here is the support link:

https://learn.microsoft.com/en-us/mem/get-support

Thanks for your understanding.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.