Microsoft Intune

Imported Pfx Profiles

22 October 2026Doc update+3 / −3 lines

In brief

Updated DevRel metadata references and the PowerShell Intune Samples link in the authentication guidance.

What Intune admins need to know

No administrator action is indicated; the existing App ID permission guidance remains available.

This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

Note

As the authentication is run against Graph, you must provide permissions to the AppID. If it's the first time you've used this utility, an *Intune administrator* role is required. The PowerShell cmdlets use the same AppID as the one used with [PowerShell Intune Samples](https://github.com/microsoftgraph/powershell-microsoft/mggraph-intune-samples).

Convert the password for each PFX file you're importing to a secure string by running $SecureFilePassword = ConvertTo-SecureString -String "<PFXPassword>" -AsPlainText -Force.
To create a UserPFXCertificate object, run $userPFXObject = New-IntuneUserPfxCertificate -PathToPfxFile "<FullPathPFXToCert>" $SecureFilePassword "<UserUPN>" "<ProviderName>" "<KeyName>" "<IntendedPurpose>"

@@ -36,13 +36,13 @@ monikers: [] item_type: Content source_path: intune/device-configuration/certificates/imported-pfx-profiles.md cmProducts:+- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/5cf46315-b33f-4e99-8224-a1592697eff9 - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/a72e95ff-4b4f-4cc1-90c6-7dcba67ff05f - https://authoring-docs-microsoft.poolparty.biz/devrel/4628cbd9-6f47-4ae1-b371-d34636609eaf-- https://authoring-docs-microsoft.poolparty.biz/devrel/bcbcbad5-4208-4783-8035-8481272c98b8 spProducts:+- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/715d24c3-3683-4219-82c5-1e3c813fb7fc - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/24dc3ccd-591a-4415-a1fe-8759afafcb12 - https://authoring-docs-microsoft.poolparty.biz/devrel/be21deb8-8c64-44b0-b71f-2dc56ca7364f-- https://authoring-docs-microsoft.poolparty.biz/devrel/43b2e5aa-8a6d-4de2-a252-692232e5edc8 platformId: 1906661d-a32f-8f0f-13bd-1fcc9c4c89d9 --- @@ -201,7 +201,7 @@ Select the Key Storage Provider that matches the provider you used to create the 
     Note
 
-    As the authentication is run against Graph, you must provide permissions to the AppID. If it's the first time you've used this utility, an *Intune administrator* role is required. The PowerShell cmdlets use the same AppID as the one used with [PowerShell Intune Samples](https://github.com/microsoftgraph/powershell-intune-samples).
+    As the authentication is run against Graph, you must provide permissions to the AppID. If it's the first time you've used this utility, an *Intune administrator* role is required. The PowerShell cmdlets use the same AppID as the one used with [PowerShell Intune Samples](https://github.com/microsoft/mggraph-intune-samples).
 5. Convert the password for each PFX file you're importing to a secure string by running `$SecureFilePassword = ConvertTo-SecureString -String "<PFXPassword>" -AsPlainText -Force`.
 6. To create a **UserPFXCertificate** object, run `$userPFXObject = New-IntuneUserPfxCertificate -PathToPfxFile "<FullPathPFXToCert>" $SecureFilePassword "<UserUPN>" "<ProviderName>" "<KeyName>" "<IntendedPurpose>"`