Hello Ramon, 1 PFXEncryptionKey should be the same for Add-IntuneKspKey and New-IntuneUserPfxCertificate. I made use of this "PFXEncryptionKey" exactly value, but probubly you can change it. 2 The New-IntuneUserPfxCertificate command has the following parameters: PathToPfxFile: The full folder path (including the drive letter) and file name of the PFX file. SecureFilePassword: The password of the PFX file. UserPrincipalName: The user name of the user that the system will deliver the certificate to (typically, an email address). ProviderName: The name of the key storage provider. KeyName: The name of the key. Usage: The intended usage of the certificate.

The fantastic website with the list; thanks for your work! Small feedback: I'm wondering if you could add a description for each framework. I know I can open the link but still... :)

Thank you for your quick response. How do a generic app (not internal app) access certificates installed via MDM?

Thank you so much for the article; it's a godsend. Could you please advise me of a typical scenario for passing credentials to a device?