Indeed queriying for the Intune device ID and also changing the CN of certificates to contain the Intune device ID resolved the problem.
Serigne.
Original Message:
Sent: Jun 19, 2024 08:41 PM
From: Herman Robers
Subject: Clearpass [ Azure ] + Intune + SCEPman | Error 6 [ get::
To me looks like you are querying based on something different (EURO-FB6****) than the Intune Device ID which looks like 74a622ba-eb11-486d-8ab8-0965bfb636b3. You should have the Intune Device ID somehere in your client certificate, which may be in the CN, but alse a different certificate field, in which case you should change the query filter to %{Certificate:whichever-field-you-have-the-Intune-Device-ID-in}. 404 means 'not found', which is expected if you send 'EURO-FB6****' instead of the actual device ID.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
Original Message:
Sent: Jun 14, 2024 09:34 AM
From: serigne_saliou
Subject: Clearpass [ Azure ] + Intune + SCEPman | Error 6 [ get::
Hi Herman Robers,
Thanks a lot for taking time to respond.
I have modified the base URL as suggested, now mine looks like this :

So now I get a different error message:


When I look at logs on the Intune Extension, I can see these lines:
2024-06-14T14:56:35.360] [INFO] Intune - [EURO-FB6****] Request for information received from ::ffff:172.17.0.1.
[2024-06-14T14:56:35.445] [DEBUG] Intune - 35d3bb33-c868-4c66-8256-214aca9edc5a Request "GET '/endpoint'" took 85 ms.
[2024-06-14T14:56:35.446] [DEBUG] Intune - [EURO-FB6****] No cached endpoint, performing device lookup.
[2024-06-14T14:56:35.633] [DEBUG] Intune - 308de9c4-7b43-4f07-b1c9-6764e0876332 Failed request "GET '/deviceManagement/managedDevices/EURO-FB6****'" took 187 ms.
[2024-06-14T14:56:35.633] [ERROR] Intune - 308de9c4-7b43-4f07-b1c9-6764e0876332 Error searching by id EURO-FB6****. Request failed with status code 404
Seems like it is having issues finding the related device on Intune..
Any idea ?
KR,
Serigne.
Original Message:
Sent: Jun 14, 2024 07:47 AM
From: Herman Robers
Subject: Clearpass [ Azure ] + Intune + SCEPman | Error 6 [ get::
Looks like your base URL is not fully correct. This is how my base URL looks like:

Please try to add that path component /device/info/id/ and see if that improves things...
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
Original Message:
Sent: Jun 14, 2024 06:39 AM
From: serigne_saliou
Subject: Clearpass [ Azure ] + Intune + SCEPman | Error 6 [ get::
Hi Team,
I am facing issue with 802.1X authentication for a client Clearpass deployment on Azure.
- Clearpass is deployed on Azure running 6.12.0.300732
- Device is enrolled to Intune
- SCEPman is used as PKI
- Clearpass Intune Extension is installed and running version 6.1.7
Clearpass Configuration :
- Authentication Method

- Clearpass Authz Source


- Clearpass Auth Service

Issue Descripton:
When attempting to connect to the PC, the Radius request fails with the following error message:
Session failed for Host=http://172.17.0.2, Reason=[get::<easy_perform>, (error=6) Couldn't resolve host name]


Can anyone help please ..
@Herman Robers
Thanks in advance team,
Regards,
Serigne.