@Maurice Beenhakker , Thanks for posting in our Q&A. From the information you provided, it seems the PKCS certificate and WiFi profile deployment are not successfully.
For our issue, as the user or device certificate is needed in the WiFi profile, we can firstly check on the PKCS certificate deployment.
In General, when the PKCS certificate profile is deployed to the device, the Intune service will ask Intune Certificate Connector to create the certificate for the user. send the request to CA, CA will issue the certificate and send it to Intune Certificate connector.And this certificate will be uploaded to Intune. Intune will re-encrypt the certificate and send it to the device. After all, the device will report the status to Intune.
To know which stage it is pending, we need log analysis. Here is a link with detailed information for the reference:
https://learn.microsoft.com/en-us/troubleshoot/mem/intune/troubleshoot-pkcs-certificate-profiles
To ensure your data is protected, if you need any help with log analysis, you can open case which is free to troubleshoot it. Here is a link to guide how to open case for the reference:
https://learn.microsoft.com/en-us/mem/get-support
Hope it can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.