Intune – Android 11 can no longer install trusted root certificate

This is a breaking change introduced by Android 11 when a device is being enroll as Android device administrator.

Android 11 can no longer install trusted root certificate on the device – this does not affect Samsung devices.

If you are using non Samsung devices enrolled as Android device administrator you will need to manually install the trusted root certificate.
Failure to install the trusted root certificate will ended to break SCEP certificate profile.

Benoit Hamet
Benoit Hamet
Benoit is working on Microsoft collaborative technologies He has been awarded as MVP for more than 12 years Currently MVP on Office 365 after being awarded on SharePoint (2011-2012) and Windows client & server (2002-2007) Speaker at various Microsoft events (TechDays, TechNet seminars) and Quest Software He works on on-premises (Active Directory, RADIUS/NPS, Exchange, Skype for Business, SharePoint, SQL, Terminal Server, Windows client and Windows Server) or online (Azure, Intune, Office 365, Exchange Online, SharePoint Online, Skype for Business Online, Teams) technologies