LogoLogo
LogoLogo
  • Welcome
  • Details
  • Editions
  • Use Cases
  • SCEPMAN Deployment
    • Getting Started
      • Standard Guide
      • Extended Guide
    • Permissions
      • Azure App Registration
      • Managed Identities
    • Deployment Options
      • Marketplace deployment
      • Enterprise deployment
      • Terraform deployment
    • Root CA
    • Intermediate CA
  • Certificate Management
    • Revocation
    • Microsoft Intune
      • Windows
        • Certificate Based Authentication for RDP
      • macOS
      • Android
      • iOS/iPadOS
      • Linux
    • Jamf Pro
      • General Configuration
      • Computers
      • Devices
      • Users
    • Other MDM Solutions
      • Google Workspace
        • ChromeOS
      • Kandji
      • Mosyle
      • SOTI MobiControl
    • Certificate Master
      • Manage Certificates
      • Certificate Signing Request (CSR)
      • TLS Server Certificate
      • Sub CA Certificate
      • Code Signing Certificate
      • Client Certificate
      • User Certificate
    • Domain Controller Certificates
    • Enrollment REST API
      • Self Service Enrollment
        • Intune Managed Linux Client
        • Unmanaged Linux Client
      • API Enrollment
        • Linux Server
        • Windows Server
      • SCEPmanClient
  • Azure Configuration
    • Application Insights
    • App Service Sizing
      • Autoscaling
    • Custom Domain
    • Geo-Redundancy
    • Health Check
      • Using 3rd Party Monitoring
    • Log Management
    • Moving Resources
    • Private Endpoints
    • Split-Tenancy
  • Update Strategy
  • SCEPman Configuration
    • SCEPman Settings
      • Basics
      • Certificates
      • Certificate Master
      • CRL
      • Dependencies (Azure Services)
        • Azure KeyVault
        • Logging
        • Microsoft Entra ID (Azure AD)
        • National Cloud Platforms
      • Enrollment REST API
      • OCSP
      • SCEP Endpoints
        • DC Validation
        • Intune Validation
        • Jamf Validation
        • Static Validation
        • Static-AAD Validation
    • Certificate Master Settings
      • Basics
      • Microsoft Entra ID (Azure AD)
      • Logging
      • National Cloud Platforms
    • Application Artifacts
    • Certificate Master RBAC
    • Device Directories
    • Intune Strong Mapping
  • Other
    • Security & Privacy
    • Support
    • Licensing
      • Azure Marketplace
    • FAQs
      • General
      • Certificate Connector
      • Network Access Controllers
      • Renewing SCEPman Root CA
    • Troubleshooting
      • Common Problems
      • Certifried Security Vulnerability
      • Cisco ISE Host Header Limitation
      • Intune service discovery API permissions
      • Re-enrollment trigger
  • Uninstallation
  • Change Log
  • Links
  • SCEPman Website
Powered by GitBook
On this page
  • Overview
  • Enterprise Edition (SCEPman EE)
  • Community Edition (SCEPman CE)
  • Edition Comparison

Was this helpful?

Editions

Last updated 1 month ago

Was this helpful?

Overview

We offer two different SCEPman editions:

  • Enterprise Edition

  • Community Edition

Both editions use the same codebase and binaries. A Community Edition can be converted to an Enterprise Edition just by inserting a SCEPman license key (and maybe doing some additional config work).

Enterprise Edition (SCEPman EE)

SCEPman EE comes with all features and is supported by our team. We charge a subscription fee for SCEPman EE.

We recommend SCEPman EE for:

  • Productive environments

  • Scalability and performance

  • Enterprise feature set

Community Edition (SCEPman CE)

SCEPman CE misses some features of SCEPman EE and is not supported by our team. SCEPman CE is free of charge.

We recommend SCEPman CE for:

  • Lab environments

  • Small businesses

  • Easy testing of SCEPman

Edition Comparison

The following table shows the most important differences between the two editions:

SCEPman Feature
Community Edition
Enterprise Edition

Machine certificates for Intune- or Jamf Pro-managed devices (Windows 10, MacOS, Android, iOS)

yes

yes

User certificates on Intune- or Jamf Pro-managed devices (Windows 10, MacOS, Android, iOS)

yes

yes

no

yes

(Access on-prem ressources and use Windows Hello for Business with AAD/Hybrid-joined devices)

no

yes

no

yes

no

yes

no

yes

no

yes

Support

no

included

Fee

free

subscription-fee

If you want to test SCEPman in your own environment, you can follow the mandatory steps in our and install SCEPman directly into your lab. If you later decide to purchase SCEPman EE, you should review our Getting Started guide and revisit all recommended and optional steps.

If your organization has Azure resource naming conventions in place and you intend to re-use the Community Edition deployment after a successful trial, please directly start with our (mandatory steps only). For the basic steps, no license key is required.

, manually issue & revoke certificates, e.g. for web servers

Certificates for other MDM-systems .

Licensing
Extended Guide
Certificate management
Kerberos authentication certificates for DCs
with Entra ID validation
Redundancy
SCEPman as intermediate CA
Standard Guide
AAD Device Compliance Check
decision matrix