Hello Ramon,

1 PFXEncryptionKey should be the same for Add-IntuneKspKey and New-IntuneUserPfxCertificate.

I made use of this "PFXEncryptionKey" exactly value, but probubly you can change it.

2 The New-IntuneUserPfxCertificate command has the following parameters:

PathToPfxFile: The full folder path (including the drive letter) and file name of the PFX file. SecureFilePassword: The password of the PFX file. UserPrincipalName: The user name of the user that the system will deliver the certificate to (typically, an email address). ProviderName: The name of the key storage provider. KeyName: The name of the key. Usage: The intended usage of the certificate.