Basics

AppConfig:SCEPman:URL

Linux: AppConfig__SCEPman__URL

Value: String (URL)

Description: This is the URL of the SCEPman instance that belongs to this Certificate Master. If you have a geo-redundant setup, this should be the URL of the SCEPman App Service nearest to Certificate Master. Certificate Master will submit certificate requests to this SCEPman instance for signing.

AppConfig:IntuneCertificateSearchStrategy

Linux: AppConfig__IntuneCertificateSearchStrategy

Value: Management, Reporting, or CombineManagementAndReporting

Description: Defines which backend API to use when querying Intune for issued certificates.

Changes can harm your service!

AppConfig:AzureStorage:TableStorageEndpoint

Linux: AppConfig__AzureStorage__TableStorageEndpoint

This defines which Table Storage Endpoint to use to store certificate information.

Changes can harm your service!

AppConfig:RemoteDebug

Linux: AppConfig__RemoteDebug

Value: Date or false

Description: You can send Debug log information to a cloud-based monitoring solution of our company for support reasons. This can speed up support cases.

You can activate and deactivate this feature by changing the value to the date until when the remote debug logging should be enabled. After this date, SCEPman will keep sending debug logs until it restarts. Microsoft App Services restart automatically every now and then, usually in a two-week timeframe. We recommend setting the value to the date in one week in the format YYYY-MM-DD. For example, on 2025-05-05, you would set this to 2025-05-12.

Up until version 2.8, you could also use 'true'. This is not possible anymore starting with SCEPman and Certificate Master version 2.9 and newer.

Do not forget to restart SCEPman App Service after enabling and saving the setting.

WEBSITE_RUN_FROM_PACKAGE

This setting points to the Application Artifacts that will be loaded by starting the App Service.