# SCEPman ## English - [Welcome](https://docs.scepman.com/readme.md): SCEPman - Certificates Simplified - [Details](https://docs.scepman.com/details.md) - [Editions](https://docs.scepman.com/editions.md) - [Use Cases](https://docs.scepman.com/use-cases.md) - [Getting Started](https://docs.scepman.com/scepman-deployment/deployment-guides.md) - [Standard Guide](https://docs.scepman.com/scepman-deployment/deployment-guides/community-guide.md) - [Extended Guide](https://docs.scepman.com/scepman-deployment/deployment-guides/enterprise-guide-1.md) - [Scenarios](https://docs.scepman.com/scepman-deployment/deployment-guides/scenarios.md) - [Certificate-based Network Authentication](https://docs.scepman.com/scepman-deployment/deployment-guides/scenarios/nac-configuration.md) - [Certificate-based Authentication for Entra ID](https://docs.scepman.com/scepman-deployment/deployment-guides/scenarios/certificate-based-authentication-for-entra-id.md) - [Certificate-based Authentication for RDP](https://docs.scepman.com/scepman-deployment/deployment-guides/scenarios/certificate-based-authentication-for-rdp.md) - [Permissions](https://docs.scepman.com/scepman-deployment/permissions.md) - [Azure App Registration](https://docs.scepman.com/scepman-deployment/permissions/azure-app-registration.md) - [Managed Identities](https://docs.scepman.com/scepman-deployment/permissions/post-installation-config.md) - [Deployment Options](https://docs.scepman.com/scepman-deployment/deployment-options.md) - [Marketplace deployment](https://docs.scepman.com/scepman-deployment/deployment-options/marketplace-deployment.md): Azure Marketplace Deployment - [Enterprise deployment](https://docs.scepman.com/scepman-deployment/deployment-options/enterprise-deployment.md): GitHub Deployment - [Terraform deployment](https://docs.scepman.com/scepman-deployment/deployment-options/terraform-deployment.md): Terraform Deployment - [Root CA](https://docs.scepman.com/scepman-deployment/first-run-root-cert.md) - [Intermediate CA](https://docs.scepman.com/scepman-deployment/intermediate-certificate.md) - [Revocation](https://docs.scepman.com/certificate-management/manage-certificates.md): Automatic certificate revocation in Microsoft Intune or Jamf Pro via OCSP using SCEPman. - [Enabling CRL](https://docs.scepman.com/certificate-management/manage-certificates/enabling-crl.md): A Certificate Revocation List (CRL) is a record that contains certificates that have been explicitly revoked. - [Microsoft Intune](https://docs.scepman.com/certificate-management/microsoft-intune.md) - [Windows](https://docs.scepman.com/certificate-management/microsoft-intune/windows-10.md): Deploy certificates to Windows devices via SCEP in Intune using SCEPman. - [macOS](https://docs.scepman.com/certificate-management/microsoft-intune/macos.md): Deploy certificates to MacOS devices via SCEP in Intune using SCEPman. - [Android](https://docs.scepman.com/certificate-management/microsoft-intune/android.md): Deploy certificates to Android devices via SCEP using Intune and SCEPman. - [iOS/iPadOS](https://docs.scepman.com/certificate-management/microsoft-intune/ios.md): Deploy certificates to iOS and iPadOS devices via SCEP in Intune using SCEPman. - [Linux](https://docs.scepman.com/certificate-management/microsoft-intune/linux.md): Deploy certificates to Linux devices via SCEP in Intune using SCEPman. - [Jamf Pro](https://docs.scepman.com/certificate-management/jamf.md) - [General Configuration](https://docs.scepman.com/certificate-management/jamf/general.md) - [Computers](https://docs.scepman.com/certificate-management/jamf/computers.md) - [Devices](https://docs.scepman.com/certificate-management/jamf/devices.md) - [Users](https://docs.scepman.com/certificate-management/jamf/users.md) - [Other MDM Solutions](https://docs.scepman.com/certificate-management/static-certificates.md) - [Addigy](https://docs.scepman.com/certificate-management/static-certificates/addigy.md): Issue certificates in Addigy by connecting SCEPman as an External CA. Devices will be able to obtain certificates using SCEPman's static interface and a challenge password enrolled. - [Google Workspace](https://docs.scepman.com/certificate-management/static-certificates/google-workspace.md): Learn how to set up and configure certificate enrollment via SCEP for ChromeOS (Chromebook) using Chrome Enterprise and SCEPman. - [ChromeOS](https://docs.scepman.com/certificate-management/static-certificates/google-workspace/chromeos.md): This document describes deploying a device and/or user certificates for ChromeOS devices. The deployment of the SCEPman Root Certificate is mandatory. - [Kandji](https://docs.scepman.com/certificate-management/static-certificates/kandji-1.md): Issue certificates in Kandji by connecting SCEPman as an External CA. Devices will be able to obtain certificates using SCEPman's static interface and a challenge password enrolled. - [Mosyle](https://docs.scepman.com/certificate-management/static-certificates/mosyle.md): Issue certificates in Mosyle by connecting SCEPman as an External CA. Devices will be able to obtain certificates using SCEPman's static interface and a challenge password enrolled. - [SOTI MobiControl](https://docs.scepman.com/certificate-management/static-certificates/soti-mobicontrol.md) - [Certificate Master](https://docs.scepman.com/certificate-management/certificate-master.md) - [Manage Certificates](https://docs.scepman.com/certificate-management/certificate-master/manage-certificates.md) - [Certificate Signing Request (CSR)](https://docs.scepman.com/certificate-management/certificate-master/certificate-signing-request-csr.md) - [TLS Server Certificate](https://docs.scepman.com/certificate-management/certificate-master/tls-server-certificate-pkcs-12.md) - [TLS Inspection (Sub CA) Certificate](https://docs.scepman.com/certificate-management/certificate-master/sub-ca-certificate.md) - [Code Signing Certificate](https://docs.scepman.com/certificate-management/certificate-master/code-signing-certificate.md) - [Device Certificate](https://docs.scepman.com/certificate-management/certificate-master/client-certificate-pkcs-12.md) - [User Certificate](https://docs.scepman.com/certificate-management/certificate-master/user-certificate.md) - [Domain Controller Certificates](https://docs.scepman.com/certificate-management/domain-controller-certificates.md) - [Enrollment REST API](https://docs.scepman.com/certificate-management/api-certificates.md) - [Self Service Enrollment](https://docs.scepman.com/certificate-management/api-certificates/self-service-enrollment.md) - [Intune Managed Linux Client](https://docs.scepman.com/certificate-management/api-certificates/self-service-enrollment/intune-managed-linux-client.md) - [Unmanaged Linux Client](https://docs.scepman.com/certificate-management/api-certificates/self-service-enrollment/unmanaged-linux-client.md) - [API Enrollment](https://docs.scepman.com/certificate-management/api-certificates/api-enrollment.md): Use this REST API using Microsoft Identities for authentication to enroll certificates as an alternative to the SCEP endpoints that require the SCEP-style of authentication. - [Linux Server](https://docs.scepman.com/certificate-management/api-certificates/api-enrollment/linux-server.md) - [Windows Server](https://docs.scepman.com/certificate-management/api-certificates/api-enrollment/windows-server.md) - [SCEPmanClient](https://docs.scepman.com/certificate-management/api-certificates/scepmanclient.md) - [Management REST API](https://docs.scepman.com/certificate-management/management-rest-api.md) - [Management API in SCEPmanClient](https://docs.scepman.com/certificate-management/management-rest-api/management-api-in-scepmanclient.md) - [Active Directory](https://docs.scepman.com/certificate-management/active-directory.md) - [General Configuration](https://docs.scepman.com/certificate-management/active-directory/general-configuration.md) - [Group Policy](https://docs.scepman.com/certificate-management/active-directory/group-policy.md) - [Scenarios](https://docs.scepman.com/certificate-management/active-directory/scenarios.md) - [RDP Server Certificate](https://docs.scepman.com/certificate-management/active-directory/scenarios/rdp-server-certificate.md) - [Application Insights](https://docs.scepman.com/azure-configuration/application-insights.md) - [App Service Sizing](https://docs.scepman.com/azure-configuration/azure-sizing.md) - [Autoscaling](https://docs.scepman.com/azure-configuration/azure-sizing/autoscaling.md): Autoscaling automatically adjusts the number of running instances based on demand to maintain performance and control costs. - [Backup Considerations](https://docs.scepman.com/azure-configuration/backup-considerations.md) - [Custom Domain](https://docs.scepman.com/azure-configuration/custom-domain.md) - [Geo-Redundancy](https://docs.scepman.com/azure-configuration/geo-redundancy.md) - [Health Check](https://docs.scepman.com/azure-configuration/health-check.md) - [Using 3rd Party Monitoring](https://docs.scepman.com/azure-configuration/health-check/using-3rd-party-monitoring.md) - [Log Management](https://docs.scepman.com/azure-configuration/log-configuration.md) - [Moving Resources](https://docs.scepman.com/azure-configuration/move-scepman-resources.md): This guide explains how to move SCEPman resources from one subscription to a new resource group in a different subscription within the same tenant. - [Private Endpoints](https://docs.scepman.com/azure-configuration/private-endpoints.md) - [Split-Tenancy](https://docs.scepman.com/azure-configuration/split-tenancy.md) - [Update Strategy](https://docs.scepman.com/azure-configuration/update-strategy.md) - [SCEPman Settings](https://docs.scepman.com/scepman-configuration/application-settings.md) - [Basics](https://docs.scepman.com/scepman-configuration/application-settings/basics.md) - [Certificates](https://docs.scepman.com/scepman-configuration/application-settings/certificates.md) - [Certificate Master](https://docs.scepman.com/scepman-configuration/application-settings/csr-validation.md) - [CRL](https://docs.scepman.com/scepman-configuration/application-settings/crl.md) - [Dependencies (Azure Services)](https://docs.scepman.com/scepman-configuration/application-settings/dependencies-azure-services.md) - [Azure KeyVault](https://docs.scepman.com/scepman-configuration/application-settings/dependencies-azure-services/azure-keyvault.md) - [Logging](https://docs.scepman.com/scepman-configuration/application-settings/dependencies-azure-services/logging.md) - [Microsoft Entra ID (Azure AD)](https://docs.scepman.com/scepman-configuration/application-settings/dependencies-azure-services/azure-ad.md) - [National Cloud Platforms](https://docs.scepman.com/scepman-configuration/application-settings/dependencies-azure-services/national-cloud-platforms.md) - [Enrollment REST API](https://docs.scepman.com/scepman-configuration/application-settings/dbcsr-validation.md) - [Active Directory](https://docs.scepman.com/scepman-configuration/application-settings/active-directory.md) - [General](https://docs.scepman.com/scepman-configuration/application-settings/active-directory/general.md) - [User Template](https://docs.scepman.com/scepman-configuration/application-settings/active-directory/user-template.md) - [Computer Template](https://docs.scepman.com/scepman-configuration/application-settings/active-directory/computer-template.md) - [DC Template](https://docs.scepman.com/scepman-configuration/application-settings/active-directory/dc-template.md) - [RDP Template](https://docs.scepman.com/scepman-configuration/application-settings/active-directory/rdp-template.md) - [OCSP](https://docs.scepman.com/scepman-configuration/application-settings/ocsp.md) - [SCEP Endpoints](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints.md) - [DC Validation](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints/dc-validation.md) - [Intune Validation](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints/intune-validation.md) - [Jamf Validation](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints/jamf-validation.md) - [Static Validation](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints/static-validation.md) - [Static-AAD Validation](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints/staticaad-validation.md) - [RADIUSaaS](https://docs.scepman.com/scepman-configuration/application-settings/scep-endpoints/radiusaas.md) - [Logging](https://docs.scepman.com/scepman-configuration/application-settings/logging.md) - [Certificate Master Settings](https://docs.scepman.com/scepman-configuration/application-settings-1.md) - [Basics](https://docs.scepman.com/scepman-configuration/application-settings-1/basics.md) - [Microsoft Entra ID (Azure AD)](https://docs.scepman.com/scepman-configuration/application-settings-1/azure-ad.md) - [National Cloud Platforms](https://docs.scepman.com/scepman-configuration/application-settings-1/national-cloud-platforms.md) - [Application Artifacts](https://docs.scepman.com/scepman-configuration/application-artifacts.md) - [Certificate Master RBAC](https://docs.scepman.com/scepman-configuration/rbac.md) - [CSR and Form Roles](https://docs.scepman.com/scepman-configuration/rbac/csr-and-form-roles.md) - [Device Directories](https://docs.scepman.com/scepman-configuration/device-directories.md) - [Intune Strong Mapping](https://docs.scepman.com/scepman-configuration/intune-implementing-strong-mapping-for-scep-and-pkcs-certificates.md): Implementing strong mapping for SCEP and PKCS certificates in Intune using SCEPman. - [Security & Privacy](https://docs.scepman.com/other/security-faq.md): This chapter provides an overview on frequently asked questions surrounding information security, privacy and quality assurance. - [Support](https://docs.scepman.com/other/support.md) - [Licensing](https://docs.scepman.com/other/licensing.md): for SCEPman Enterprise Edition - [Azure Marketplace](https://docs.scepman.com/other/licensing/azure-marketplace.md) - [cleverbridge](https://docs.scepman.com/other/licensing/cleverbridge.md) - [FAQs](https://docs.scepman.com/other/faqs.md) - [General](https://docs.scepman.com/other/faqs/general.md) - [Certificate Connector](https://docs.scepman.com/other/faqs/certificate-connector.md): Comparing Microsoft Certificate Connector for Intune / Active Directory Certificate Services (ADCS) and SCEPman in terms of deployment and operational efforts. - [Renewing SCEPman Root CA](https://docs.scepman.com/other/faqs/renewing-scepman-root-ca.md) - [PKI & Certificates](https://docs.scepman.com/other/faqs/pki-and-certificates.md) - [Key Vault RBAC Migration](https://docs.scepman.com/other/faqs/key-vault-rbac-migration.md) - [Troubleshooting](https://docs.scepman.com/other/troubleshooting.md) - [Common Problems](https://docs.scepman.com/other/troubleshooting/general.md) - [Certifried Security Vulnerability](https://docs.scepman.com/other/troubleshooting/certifried.md) - [Cisco ISE Host Header Limitation](https://docs.scepman.com/other/troubleshooting/cisco-ise-host-header-limitation.md) - [Intune service discovery API permissions](https://docs.scepman.com/other/troubleshooting/intune-service-discovery-api-permissions.md) - [Re-enrollment trigger](https://docs.scepman.com/other/troubleshooting/re-enrollment-trigger.md) - [SID-Spoofing Vulnerability](https://docs.scepman.com/other/troubleshooting/sid-spoofing-vulnerability.md) - [Uninstallation](https://docs.scepman.com/uninstall.md) - [Change Log](https://docs.scepman.com/changelog.md) - [Links](https://docs.scepman.com/important-links.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on a page URL with the `ask` query parameter: ``` GET https://docs.scepman.com/readme.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.