Enrollment REST API
Last updated
Was this helpful?
Last updated
Was this helpful?
SCEPman Enterprise Edition only
SCEPman features a REST API to enroll certificates using the Enrollment over Secure Transport (EST) protocol. This is an alternative to the SCEP endpoints that require the SCEP-style of authentication, while the REST API uses Microsoft Identities for authentication. The protocol is also much simpler than SCEP.
The REST API features two different authentication models.
As a user, you can interactively authenticate if you have the CSR.SelfService role. This allows you to request certificates for yourself and your devices. See for more details.
You can also authenticate as a service principal that has the CSR.Request.Db role. This allows you to automate certificate enrollment to servers, IoT devices, or in other use cases. See for details.