Changelog

Versions
2.2 - Upcoming
SCEPman (currently in Internal Channel)
Revoke Intune certificates on some MEM events
​Intune-enrolled user certificates become invalid when user risk exceeds a configured threshold​
SCEPman Certificate Master
Issuance of SubCA certificates through Certificate Master, e.g. for proxy servers or firewalls
Additional certificate file formats for Certificate Master
Certificate Master lists issued client certificates for manual revocation
2.1.522 - May 2022
​Request Client Certificates manually through Certificate Master​
Library and Framework updates
Improved Performance with .NET 6
Other library updates
Robustness
Bearer Authentication for Jamf Classic API
​Invalidate certificates for Intune devices with pending wipes or otherwise unhealthy management states​
Minor Improvements
2.0.473 - March 2022
​Certificate Management​
Manually issue TLS Server certificates
Revoke manually issued certificates
Search for manual certificates
Library and Framework updates
Improved Performance with .NET 5
Azure Key Vault
Other library updates
​Easier deployment, no manual app registraton required anymore​
​Select whether to use AAD or Intune directory for device validity checks​
New UI
So beautiful and with a new logo
Detailed information on activated SCEP endpoints
​Compatibility with GCC High, GCC DoD, and 21Vianet environments​
Various minor improvements
1.9.207 - July 2021
​JAMF User Certificates​
Update to the Compliance Check Preview​
Also working for Windows devices during enrollment
Improved RADIUS-as-a-Service compatibility
Minor advancements
Improved error messages
Improved Compatibility with ISE with a new default setting​
1.8.155 - June 2021
Improved robustness in exceptional situations
Correct answers to invalid OCSP requests, which may occur rarely for certificates issued by SCEPman 1.5 or earlier
​Certificate issuance scheduling in overload situations​
Option to configure a "Clock Skew" for clients with clocks running slow (> 10 minutes), which happens in few tenants for Intune-managed Windows devices​
Logging
Less log clutter on Info level
Performance
Caching some repeated requests to Graph API
1.7.140 - June 2021
Solution for Microsoft's additional permission requirements preventing SCEPman from issuing certificates via Intune​
1.7.122 - June 2021
Bugfix regarding OCSP checks for certificates issued via JAMF
1.7.101 - May 2021
Support for Computer and Device Certificates via JAMF​
Separate Certificate Lifetimes for each endpoint, e.g. for Domain Controller Certificates​
​Secure application configuration in Key Vault​
Moved the release path to https://github.com/scepman/install. Please update your setting WEBSITE_RUN_FROM_PACKAGE as described in Section Application Artifacts.
Preview of Compliance Checks​
Minor advancements
Workaround a bug on some Android versions to gain correct validity periods
SCEPman CA certificates receive an Extended Key Usage to improve compatibility with some versions of Cisco ISE
Further improvements to error messages
Updated some dependencies
Improved Homepage
1.6.465 - January 2021
Bugfix where some OCSP requests were unanswered
Bugfix impacting local logging
1.6.455 - November 2020
Support for certificates for Domain Controllers, especially for use in Windows Hello for Business (Enterprise Edition only)
Generic support for 3rd-party MDM systems via endpoint static​
Improved error logging
Bug fixing
1.5 - July 2020
Key Usage, Extended Key Usage, and validity period configured in the request (i.e. in Intune)
Improved performance when answering certificate and OCSP requests
1.4 - Mai 2020
Performance enhancements
Bug fixing
1.3 - October 2019
Support for Authentication-Only user certificates (VPN, Wifi, network) in addition to device certificates.
Support for Intune blade certificate list
1.2 - 2019
Changed Log component
1.1 - 2019
Support for SAN Attributes
Sanity Checks
First release of Community Edition
1.0 - 2019
Initial release