Skip to main content
Benjamin
Benjamin
Level 2.0: Eclair
June 16, 2026
Question

Problem connecting a BYOD smartphone to a corporate Wi-Fi network with a certificate

  • June 16, 2026
  • 1 reply
  • 22 views
Hello,I'm trying to configure a corporate Wi-Fi network with certificate-based authentication.The connection works fine on an Android smartphone enrolled in Intune in COPE mode, but I can't get it to work on a smartphone enrolled in BYOD mode.I have a fleet of Samsung smartphones, both COPE and BYOD.The certificate is installed on the BYOD smartphones via an Intune PKCS profile, and I followed the recommendations (user-type certificate, Subject name = CN={{UserPrincipalName}}, and adding the SAN: User principal name (UPN) = {{UserPrincipalName}}, I published the CA that issued the certificate).The certificate is correctly installed on the BYOD smartphone and visible in the work profile, but the Wi-Fi connection fails.When I check the Wi-Fi configuration on the BYOD smartphone, there's no client certificate, which can explain the connection failure.Has anyone successfully configured a corporate Wi-Fi network with certificate authentication on a smartphone enrolled in BYOD mode on Intune?

    1 reply

    Kirk
    KirkCommunity Manager
    Community Manager
    June 16, 2026

    Hi Benjamin, 

    Welcome to the community!

    It sounds like you’ve clearly already done the legwork here, the configuration sounds right (to my knowledge) and you've pinpointed exactly where it's breaking down.
     

    One thing worth checking, if you haven't already: is the Wi-Fi profile in Intune directly referencing the PKCS certificate profile, rather than the certificate just being deployed separately? That's a step that's easy to miss and would explain why no client certificate is showing up in the Wi-Fi config.
     

    That said, this does sound like it could be a known difference in how COPE and BYOD handle certain features in Android Enterprise, so if anyone in the community has hit this same wall and found a way through, we'd love to hear it.
     

    Cheers,
    Kirk

      Terms & ConditionsAccessibility statement