G2

Gayan K.

System and Network Administrator

Information Services

Mid-Market (51-1000 emp.)

6/12/2026

"Automated 802.1X Certificates with Intune SCEP using EZCA"

4.5/5

What do you like best about EZCA?

it eliminates the need to stand up and maintain a traditional on-prem PKI/CA infrastructure for 802.1X. Combined with Intune SCEP, certificate issuance and renewal to corporate devices is fully automated devices get their EAP-TLS client certs pushed out without manual enrollment steps, which makes the certificate-based authentication side of the project largely "set and forget" once configured. Review collected by and hosted on G2.com.

What do you dislike about EZCA?

When it comes to the troubleshooting ,

A clearer status dashboard showing per-device certificate issuance/enrollment state (rather than relying on Intune's general policy status) would make verification faster. Review collected by and hosted on G2.com.

What problems is EZCA solving and how is that benefiting you?

EZCA is solving the certificate management headache that usually comes with EAP-TLS without it, we'd need to run our own CA, manually issue and renew client certs, and handle distribution to every device ourselves. Instead, certs are automatically pushed to corporate devices via Intune SCEP, so devices get the right credentials without IT having to touch each machine individually.

The benefit is that our 802.1X authentication is actually sustainable long-term certs renew automatically before they expire, new devices get enrolled as part of onboarding, and we're not stuck maintaining PKI infrastructure that would otherwise be a full project on its own. It's freed up time to focus on the network side of things rather than chasing certificate expirations. Review collected by and hosted on G2.com.