Application Settings

The section describes additional settings for the behavior of SCEPman. All of these are optional, though, and we recommend just start with the defaults.

Settings can be added or changed manually if needed. Some changes can harm your service. Please carefully read all information about a setting before changing.

For each Setting, you can choose whether you want to define the setting in the App Service Configuration or in Azure Key Vault. If you define the same setting in both places, Azure Key Vault takes precedence.

Convenient Configuration in the App Service Configuration

On your App Service navigate to Configuration and then you find this under Application settings. Use the setting names as described below.

We recommend defining settings in the App Service Configuration except for passwords.

Secure Configuration in Azure Key Vault

This feature requires version 1.7 or above.

Especially for sensitive information, you can also configure settings as Secrets in Azure Key Vault. You must first grant edit rights to Secrets in the Azure Key Vault associated with your SCEPman instance to an administrator account. Then, you can use this administrator account to define new Secrets.

Remark: Use double dashes instead of colons in configuration names! For example, instead of AppConfig:DCValidation:RequestPassword, the Secret must be named AppConfig--DCValidation--RequestPassword.

We recommend using this type of configuration only for sensitive information.

List of Settings

pageBasicspageCertificatespageIntune ValidationpageJamf ValidationpageDC ValidationpageStatic ValidationpageStatic ValidationpageCertificate MasterpageMicrosoft Entra ID (Azure AD)pageAzure KeyVaultpageNational Cloud platforms