This section will guide you through creating an Application Proxy with Microsoft Entra to deploy device certificates. You will need to have a domain server, DNS server, CA server, and an NDES server to set this up, all of which have been covered earlier in this series.

This can be a very complicated topic and has a lot of configurations that rely on other services. The application proxy will allow the deliverance of a certificate deployed via MDM to a device on or off of the corporate network.