Questions tagged [scep]

27 questions
6
votes
0 answers

Creating a C# SCEP server

I am trying to build a SCEP server to support Apple MDM Device Enrollment. This needs to be implemented into our current MDM Service, written in C#. I have looked into the following for inspiration: JSCEP, a java library for scep server…
Greenberg
  • 81
  • 7
3
votes
0 answers

SCEP Client for Embedded Linux device

I need to add SCEP functionality to an embedded Linux application, i.e. manual enrollment, auto enrollment, certificate renewal. Could you advice a SCEP client available for embedded Linux which implements this functionality? Thanks in advance.
Maxim
  • 83
  • 6
3
votes
1 answer

Send SCEP request from Android

I'm looking for a way to send SCEP requests from android devices. I found some incomplete code in this SO-question. Of course I could do all the work and boilerplate code myself, but I wonder if there's a more standard way to enroll android devices…
Frank
  • 2,036
  • 1
  • 20
  • 32
2
votes
1 answer

What is the Character Encoding of x509 certificates?

I'm implementing an SCEP server to distribute client certificates. According to the protocol, For the GetCACert request from device, the content-type of the response header should be application/x-x509-ca-cert. My problem is that by default, the…
user1234
  • 23
  • 4
1
vote
1 answer

How do I point NDES to new CA on ADCS PKI?

I've searched far and wide but am unable to find reference to having NDES point to a new CA. During the configuration of the ADCS NDES role you have to point to specific CA. However we are now in the process of building a new CA. The current one is…
1
vote
1 answer

Can I use openssl cli tools to generate SCEP request message?

I'm trying to request a certifiacte through SCEP service. I used openssl to generate key and CSR file. But I don't find a way to generate PKImessage send to scep server. Is it possible to use openssl cli to generate the message?
1
vote
0 answers

How to configure tomcat 8 to support SCEP. Required for MDM

I have a BlackBerry UEM server and a scep certificate has been assigned to a profile. I want to achieve single sign on (SSO). I have a Tomcat 8.5 server, how should i enable Tomcat server to support Client Cert authentication so that it can use the…
Sujit Jadhav
  • 115
  • 3
  • 11
1
vote
1 answer

Win7 : Black screen when switching users / logging off with SCEP av client enabled?

Anyone out there run into this? : Seeing Win7 Ent machines show black screen and go unresponsive when switching users or logging out while the SCEP client (Microsoft's AV client supplied with SCCM) is enabled. If I disable it, the issue goes away.…
1
vote
1 answer

iOS MDM SCEP PKIOperation: The SCEP server returned an invalid response

Preface I am working on implementing an iOS MDM server in Node.js and using node-forge for PKI. Part of Device Enrollment requires the use of SCEP. Issue Devices are currently failing at the initial operation=PKIOperation CSR request to my server.…
NuSkooler
  • 5,391
  • 1
  • 34
  • 58
0
votes
0 answers

Intune problems on Windows

I'm using Intune on Windows. Among others there needs to be generated a certificate via the SCEP protocol. Therefore we implemented a SCEP-CA-adapter that implements the SCEP-Server protocol. On syncing Windows, the SCEP process gets triggered. The…
Thomas
  • 11
  • 1
0
votes
0 answers

Microsoft NDES server not supporting latest cryptography algorithm for SCEP

I have a Network Device Enrollment Service running on a MS Windows Server 2016 machine. I want to use it for certificate signing requests with SCEP. However, when I query the capabilities of the server it returns that 3DES is the strongest cipher…
ABash
  • 1
  • 1
0
votes
0 answers

Facing issue of WS_E_INVALID_FORMAT Creating CEP service response for xml

Create xml soap service using the MS-XCEP protocol return the xml response but when i configure it facing the issue of the WS_E_INVALID_FORMAT here is the xml response. Please help me...if anyone having the solution.. I try the using to validate…
0
votes
1 answer

"CA certificate fingerprint could not be verified. " when trying to initiate the process to enroll SCEP certificate on Android and Intune

Good evening. So, here is my problem: I'm responsible to set up all NDES infrastructure to provide SCEP certificate for Android devices enrolled in Intune. After exhaustively covering all installation/configuration steps in the infrastructure, my…
0
votes
1 answer

How to manage certificates on Android devices using Android Management API

I am developing a solution to manage client certificate deployment on android devices using SCEP. I have a few questions about the Android management API. On the Android Enterprise site…
Peter Zhou
  • 3,881
  • 2
  • 21
  • 19
0
votes
1 answer

enabling CRP.msi on SCCM gives Error 1603

am trying to enable SCCM + NDES + CRP to distribute SCEP configurations. Following steps mentioned https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/certificate-infrastructure here. It's when I tried to enable CRP role on my SCCM…
pyNag
  • 113
  • 2
  • 9
1
2