

When authenticating, a fingerprint is sent to the client so the client knows to trust any server that has the same fingerprint. This fingerprint verifies that the VPN server can be trusted. Your options:įingerprint (Check Point Capsule VPN only): Enter the fingerprint string given to you by the VPN vendor, such as Contoso Fingerprint Code. If no derived credential issuer is configured, Intune prompts you to add one.įor more information, see Use derived credentials in Intune.Ĭonnection type: Select the VPN connection type. Username and password: When signing into the VPN server, end users are prompted to enter their user name and password.ĭerived credential: Use a certificate that's derived from a user's smart card. Configure certificates lists the steps to create a certificate profile. Your options:Ĭertificates: Select an existing SCEP or PKCS certificate profile to authenticate the connection. For example, enter 192.168.1.1 or .Īuthentication method: Choose how devices authenticate to the VPN server. VPN server address: Enter the IP address or fully qualified domain name (FQDN) of the VPN server that devices connect. End users see this name when they browse their device for the available VPN connections. Base VPNĬonnection name: Enter a name for this connection. Before you beginĬreate an Android device administrator VPN device configuration profile. To learn more about VPN profiles in Intune, see VPN profiles. As part of your mobile device management (MDM) solution, use these settings to create a VPN connection, choose how the VPN authenticates, select a VPN server type, and more.Īs an Intune administrator, you can create and assign VPN settings to Android devices. This article describes the different VPN connection settings you can control on Android devices.
