# Editions

## Overview

We offer two different SCEPman editions:

* Enterprise Edition
* Community Edition

Both editions use the same codebase and binaries. A Community Edition can be converted to an Enterprise Edition just by inserting a SCEPman license key (and maybe doing some additional config work).

## Enterprise Edition (SCEPman EE)

SCEPman EE comes with all features and is supported by our team. We charge a subscription fee for SCEPman EE.

We recommend SCEPman EE for:

* Productive environments
* Scalability and performance
* Enterprise feature set

{% content-ref url="other/licensing" %}
[licensing](https://docs.scepman.com/other/licensing)
{% endcontent-ref %}

## Community Edition (SCEPman CE)

SCEPman CE misses some features of SCEPman EE and is not supported by our team. SCEPman CE is free of charge.

We recommend SCEPman CE for:

* Lab environments
* Small businesses
* Easy testing of SCEPman

If you want to test SCEPman in your own environment, you can follow the **mandatory** steps in our [Standard Guide](https://docs.scepman.com/scepman-deployment/deployment-guides/community-guide) and install SCEPman directly into your lab. If you later decide to purchase SCEPman EE, you should review our Getting Started guide [decision matrix](https://docs.scepman.com/scepman-deployment/deployment-guides#decision-matrix) and revisit all **recommended** and **optional** steps.

{% hint style="info" %}
If your organization has Azure resource naming conventions in place and you intend to re-use the Community Edition deployment after a successful trial, please directly start with our [Extended Guide](https://docs.scepman.com/scepman-deployment/deployment-guides/enterprise-guide-1) (**mandatory** steps only). For the basic steps, no license key is required.
{% endhint %}

## Edition Comparison

The following table shows the most important differences between the two editions:

| SCEPman Feature                                                                                                                                                                                                                                      |           Community Edition           |             Enterprise Edition             |
| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :-----------------------------------: | :----------------------------------------: |
| <p><strong>Machine certificates</strong> for Intune- or Jamf Pro-managed devices<br>(Windows 11, MacOS, Android, iOS)</p>                                                                                                                            | <mark style="color:green;">yes</mark> |    <mark style="color:green;">yes</mark>   |
| <p><strong>User certificates</strong> on Intune- or Jamf Pro-managed devices<br>(Windows 11, MacOS, Android, iOS)</p>                                                                                                                                | <mark style="color:green;">yes</mark> |    <mark style="color:green;">yes</mark>   |
| **Machine** and **user certificats** for [Active Directory / GPO](https://docs.scepman.com/certificate-management/active-directory) managed (domain-joined) devices (Windows 10/11)                                                                  |   <mark style="color:red;">no</mark>  |    <mark style="color:green;">yes</mark>   |
| <p><a href="certificate-management/certificate-master">Certificate management</a>, manually issue & revoke certificates,<br>e.g. for web servers</p>                                                                                                 |   <mark style="color:red;">no</mark>  |    <mark style="color:green;">yes</mark>   |
| <p><a href="certificate-management/domain-controller-certificates">Kerberos authentication <strong>certificates for DCs</strong></a></p><p>(Access on-prem ressources and use<br>Windows Hello for Business with Entra ID/Hybrid-joined devices)</p> |   <mark style="color:red;">no</mark>  |    <mark style="color:green;">yes</mark>   |
| Certificates for other MDM-systems [**with Entra ID validation**](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints/staticaad-validation).                                                                          |   <mark style="color:red;">no</mark>  |    <mark style="color:green;">yes</mark>   |
| [Redundancy](https://docs.scepman.com/azure-configuration/geo-redundancy)                                                                                                                                                                            |   <mark style="color:red;">no</mark>  |    <mark style="color:green;">yes</mark>   |
| [SCEPman as intermediate CA](https://docs.scepman.com/scepman-deployment/intermediate-certificate)                                                                                                                                                   |   <mark style="color:red;">no</mark>  |    <mark style="color:green;">yes</mark>   |
| [Device Compliance Check](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints/intune-validation#appconfig-intunevalidation-compliancecheck)                                                                           |   <mark style="color:red;">no</mark>  |    <mark style="color:green;">yes</mark>   |
| Support                                                                                                                                                                                                                                              |   <mark style="color:red;">no</mark>  | <mark style="color:green;">included</mark> |
| Fee                                                                                                                                                                                                                                                  |                  free                 |              subscription-fee              |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.scepman.com/editions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.