Unable to join WiFi network (Intune enrolment with SCEP)

Hi,

I hope someone can help.

I am currently trying to setup iOS device (iPad's) enrollment within Intune. I cannot seem to get the device to automatically connect to the company WiFi using the WiFi profile within Intune.

I have profiles for the following: -

• Root CA Certificate (Trusted Certificate Profile)
• Intermediate Certificate (Trusted Certificate Profile)
• Certificate from our RADIUS server (Trusted Certificate Profile)
• SCEP Certificate Profile (Details below)

-- Cert type - Device

-- Subject Name Format - CN={{AAD_Device_ID}}

-- Subject Alternative Name - UPN & DNS

-- Key Usage - Both Digital Signature & Key Encipherment

-- Key Size - 2048 bits

-- Root CA (Trusted Certificate Above)

-- Extended Key Usage - Client Authentication

-- SCEP Server URL - URL to SCEP Server

All of these profiles are successfully being pushed to the iPad and i can see the certificates on the device. I can also see the certificates being issued on the CA server.

When i click on the WiFi name to try and join it, i get the 'Unable to join xxxx' error.

I have connected the iPad to a Mac and have access to the debugging and error messages on Console. I can see the following messages:-

Process - wifid - 'Attempting to join EAP network: (SSID of WiFi network)

Process - wifid - 'WiFiSecurityCopyNonSyncablePassword: Attempting to fetch non-syncable password for account (SSID)

Process - wifid - 'WiFiSecurityCopyNonSyncablePassword: [SSID] Error result -25300

I have tried googling these error messages with little success. Does anyone know what Error -25300 means or has anyone had any success with enrolling iPads with Intune?

Many thanks