Authenticate devices via certificate (EAP-TLS) with Intune Cloud PKI and SCEP profiles on Windows NPS server, configure the SAN with the computer account's UPN to avoid issues, and learn more about certificate requirements and best practices with Intune.