Re-enrollment trigger

In some cases, admins want to trigger a re-enrollment for SCEP certificates, in the table below, you will find the effect of changing some properties of a SCEP configuration profile on the re-enrollment procedure

Property nameRe-enrollment triggered

Profile name

No

Profile description

No

Subject name format

Yes

Subject alternative name

Yes

Certificate validity period

Yes

Extended Key Usages (EKU)

Yes

Renewal threshold

No

To understand and troubleshoot SCEP certificate renewal process in Intune, please check the great article Deep dive of SCEP certificate request/renewal on Intune-managed Windows clients on Oliver Kieselbach's blog.

Last updated