Managing SCEP endpoints

Edit a SCEP endpoint

  1. Navigate to Enrollment  SCEP.

  2. Select the endpoint you want to edit, and click Edit.

  3. In the Edit Enrollment Endpoint dialog, click the Edit icon, and update the endpoint’s name as required.

  4. Update the Details tab based on the information provided in the following table.

    Field Description

    URI Extension

    The URI extension used to create a unique URL for the endpoint that SCEP clients will use to connect to the SCM SCEP server.

    Profile

    The certificate profile used when enrolling certificates through the account.

    This is available only for Intune SCEP endpoints.

    Term

    The validity period of certificates issued through the endpoint.

    This is available only for Intune SCEP endpoints.

  5. Update the Configuration tab based on the information provided in the following table.

    Field Description

    SCEP RA Certificate

    The SCEP RA certificate used to sign SCEP responses. This RA certificate must be provided during the configuration of the SCEP client.

    GetCACert Response Format

    The format of the response to the GetCACert request.

    • Single PEM — The certificate is returned in .pem format.

    • Chain in CMS — The certificate and any intermediate certificates are returned in .cms format.

    GetCert Response Format

    The format of the response to the GetCert request.

    • Single Certificate — Only the certificate is returned.

    • Full Chain — The certificate, any intermediate certificates, and the root certificate are returned.

    Azure Account

    The SCM Azure account used to authenticate the endpoint.

    This is available only for Intune SCEP endpoints.

  6. Click Save.

Delete a SCEP endpoint

  1. Navigate to Enrollment  SCEP.

  2. Select the endpoint you want to delete, and click the Delete icon.

  3. Click Delete.

  4. Click Save.