Microsoft Cloud PKI is operated entirely as a cloud service within the Microsoft environment. With a fully Microsoft-managed Cloud PKI, no local CA, NDES, or Certificate Connector components are required.
This is particularly attractive for companies that want to implement certificate provisioning entirely in the cloud and exclusively for Intune-managed endpoints. At the same time, the solution is more closely tied to the Microsoft ecosystem. Companies that also require certificates for servers, network components, applications, IoT devices, or other platforms need additional PKI and CLM capabilities.