Windows 11 Is Killing Enterprise Certificate Auto-Enrollment

Microsoft has quietly deprecated the Certificate Auto-Enrollment protocol in Windows 11, forcing enterprises to adopt modern certificate management via Intune or third-party tools. This episode digs into the technical change, the timeline, and the real-world impact on IT teams that still rely on legacy Group Policy-driven auto-enrollment for Wi-Fi, VPN, and smart-card authentication. Lucas and Luna walk through a concrete example from a mid-sized healthcare organization that had to scramble when Windows 11 24H2 broke their certificate renewal pipeline. They discuss Microsoft's stated rationale — security hardening — and whether the trade-off in administrative overhead is worth it. The episode also touches on how this fits into Microsoft's broader strategy of deprecating on-premises identity management in favor of cloud-first Entra ID workflows. #Windows11 #EnterpriseIT #CertificateAutoEnrollment #Microsoft #Intune #EntraID #GroupPolicy #PKI #SecurityHardening #ITAdmin #HealthcareIT #WiFiAuthentication #VPN #SmartCard #TechPodcast #FexingoBusiness #BusinessPodcast #WindowsPodcast Keep every episode free: buymeacoffee.com/fexingo