Jamf Validation
Applicable to version 1.7 and above
Value: true or false
True: SCEPman listens at the additional SCEP server endpoint with the path
/jamf. Use in conjunction with AppConfig:JamfValidation:RequestPassword. False (default): SCEPman does not issue certificates for Jamf.Applicable to version 1.7 and above
Value: String
Description: A challenge password that Jamf must include in every SCEP request to acquire a certificate. Only used if AppConfig:JamfValidation:Enabled is set to true.
We recommend to define this setting as Secret in Azure Key Vault. The Secret must have the name AppConfig--JamfValidation--RequestPassword.
Applicable to version 1.7 and above
Value: Positive Integer
Description: This setting further reduces the global ValidityPeriodDays for the Jamf endpoint.
Applicable to version 1.7 and above
Value: String
Description: The root URL of your Jamf instance. If you use Jamf Cloud, this will probably look like
https://your-instance.jamfcloud.com/.Applicable to version 1.7 and above
Value: String
Description: The name of a service account in Jamf that SCEPman uses to authenticate on your Jamf instance. SCEPman needs the following permissions to query for computers, devices, and users:
- Computers -> Read
- Mobile Devices -> Read
- Users -> Read
Applicable to version 1.7 and above
Value: String
Description: The password of the service account configured in AppConfig:JamfValidation:APIUsername.
We recommend to define this setting as Secret in Azure Key Vault. The Secret must have the name AppConfig--JamfValidation--APIPassword.
If you set this setting as a Secret in the Key Vault, you do not need to add the AppConfig:JamfValidation:APIPassword to SCEPman configuration anymore.
Applicable to version 2.3 and above
SCEPman Enterprise Edition only
Value: true or false (default)
Description: When requesting certificates via the Jamf endpoint, SCEPman stores those requested certificates in the Storage Account in Azure if this is set to true. This will make the issued certificates appear in SCEPman Certificate Master, where you can view and revoke them manually. Additionally, certificates are revoked automatically if the corresponding Jamf object is deleted. If set to false or not set, SCEPman will not store issued certificates and the certificates are visible only in the logs or if the SCEP client stores them somewhere.
Last modified 3mo ago