Hello

I am trying to deploay fastpass and device integration

i have followed those procedure for both windows and mac os device

https://help.okta.com/oie/en-us/content/topics/identity-engine/devices/okta-ca-delegated-scep-macos-intune.htm

https://help.okta.com/oie/en-us/content/topics/identity-engine/devices/okta-ca-delegated-scep-win-intune.htm

the SCEP certificate generation is not working at all

on mac os, i can see this kind of logs

[0:Cert_PI:SCEP:<0x120db6>] TrustError : Error Domain=NSOSStatusErrorDomain Code=-25318 "errKCCreateChainFailed / errSecCreateChainFailed: / The attempt to create a certificate chain failed." UserInfo={NSLocalizedDescription=Le certificat « Organization Intermediate Authority » n’est pas fiable., NSUnderlyingError=0x14fb091c0 {Error Domain=NSOSStatusErrorDomain Code=-25318 "errKCCreateChainFailed / errSecCreateChainFailed: / The attempt to create a certificate chain failed." UserInfo={NSLocalizedDescription=Le certificat 1 « Organization Intermediate Authority » contient des erreurs : Impossible de créer la chaîne vers la racine (intermédiaire potentiellement manquant).;}}}

and on windows this kind of error

[Friday 10:14 AM]

SCEP: Certificate enroll failed. Result: (Unknown Win32 Error code: 0x87d00905).

i had a look at the CA certificate from Okta, and i can see, when i download it, the issuer of this certificate is Organization Root Authority.

Is there a chance the problem is because i don't have this particular certificate in my Trusted Root CA store ?

Thank you so much in advance

Regards,

Yannick