Questions tagged [scep]
27 questions
6
votes
0 answers
Creating a C# SCEP server
I am trying to build a SCEP server to support Apple MDM Device Enrollment. This needs to be implemented into our current MDM Service, written in C#.
I have looked into the following for inspiration:
JSCEP, a java library for scep server…

Greenberg
- 81
- 7
3
votes
0 answers
SCEP Client for Embedded Linux device
I need to add SCEP functionality to an embedded Linux application, i.e. manual enrollment, auto enrollment, certificate renewal.
Could you advice a SCEP client available for embedded Linux which implements this functionality?
Thanks in advance.

Maxim
- 83
- 6
3
votes
1 answer
Send SCEP request from Android
I'm looking for a way to send SCEP requests from android devices. I found some incomplete code in this SO-question. Of course I could do all the work and boilerplate code myself, but I wonder if there's a more standard way to enroll android devices…

Frank
- 2,036
- 1
- 20
- 32
2
votes
1 answer
What is the Character Encoding of x509 certificates?
I'm implementing an SCEP server to distribute client certificates. According to the protocol, For the GetCACert request from device, the content-type of the response header should be application/x-x509-ca-cert.
My problem is that by default, the…

user1234
- 23
- 4
1
vote
1 answer
How do I point NDES to new CA on ADCS PKI?
I've searched far and wide but am unable to find reference to having NDES point to a new CA. During the configuration of the ADCS NDES role you have to point to specific CA. However we are now in the process of building a new CA. The current one is…

MyPkiProblems
- 11
- 1
1
vote
1 answer
Can I use openssl cli tools to generate SCEP request message?
I'm trying to request a certifiacte through SCEP service. I used openssl to generate key and CSR file. But I don't find a way to generate PKImessage send to scep server. Is it possible to use openssl cli to generate the message?

weilun cheng
- 13
- 3
1
vote
0 answers
How to configure tomcat 8 to support SCEP. Required for MDM
I have a BlackBerry UEM server and a scep certificate has been assigned to a profile.
I want to achieve single sign on (SSO).
I have a Tomcat 8.5 server, how should i enable Tomcat server to support Client Cert authentication so that it can use the…

Sujit Jadhav
- 115
- 3
- 11
1
vote
1 answer
Win7 : Black screen when switching users / logging off with SCEP av client enabled?
Anyone out there run into this? :
Seeing Win7 Ent machines show black screen and go unresponsive when switching users or logging out while the SCEP client (Microsoft's AV client supplied with SCCM) is enabled. If I disable it, the issue goes away.…

Shawn Keslar
- 13
- 3
1
vote
1 answer
iOS MDM SCEP PKIOperation: The SCEP server returned an invalid response
Preface
I am working on implementing an iOS MDM server in Node.js and using node-forge for PKI. Part of Device Enrollment requires the use of SCEP.
Issue
Devices are currently failing at the initial operation=PKIOperation CSR request to my server.…

NuSkooler
- 5,391
- 1
- 34
- 58
0
votes
0 answers
Intune problems on Windows
I'm using Intune on Windows. Among others there needs to be generated a certificate via the SCEP protocol. Therefore we implemented a SCEP-CA-adapter that implements the SCEP-Server protocol. On syncing Windows, the SCEP process gets triggered.
The…

Thomas
- 11
- 1
0
votes
0 answers
Microsoft NDES server not supporting latest cryptography algorithm for SCEP
I have a Network Device Enrollment Service running on a MS Windows Server 2016 machine. I want to use it for certificate signing requests with SCEP. However, when I query the capabilities of the server it returns that 3DES is the strongest cipher…

ABash
- 1
- 1
0
votes
0 answers
Facing issue of WS_E_INVALID_FORMAT Creating CEP service response for xml
Create xml soap service using the MS-XCEP protocol return the xml response but when i configure it facing the issue of the WS_E_INVALID_FORMAT here is the xml response.
Please help me...if anyone having the solution..
I try the using to validate…
0
votes
1 answer
"CA certificate fingerprint could not be verified. " when trying to initiate the process to enroll SCEP certificate on Android and Intune
Good evening.
So, here is my problem: I'm responsible to set up all NDES infrastructure to provide SCEP certificate for Android devices enrolled in Intune.
After exhaustively covering all installation/configuration steps in the infrastructure, my…
0
votes
1 answer
How to manage certificates on Android devices using Android Management API
I am developing a solution to manage client certificate deployment on android devices using SCEP. I have a few questions about the Android management API.
On the Android Enterprise site…

Peter Zhou
- 3,881
- 2
- 21
- 19
0
votes
1 answer
enabling CRP.msi on SCCM gives Error 1603
am trying to enable SCCM + NDES + CRP to distribute SCEP configurations.
Following steps mentioned https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/certificate-infrastructure here.
It's when I tried to enable CRP role on my SCCM…

pyNag
- 113
- 2
- 9