Certificate Master

SCEPman Enterprise Edition only

These settings should only be applied to the SCEPman App Service, not the Certificate Master. Please refer to SCEPman Settings.

AppConfig:CertMaster:URL

Linux: AppConfig__CertMaster__URL

Value: The URL of your SCEPman Certificate Master App Service

Description: Your Certificate Master service is linked to on the SCEPman Homepage using the URL configured here. The SCEPman PowerShell module also uses this value during updates or re-configurations to link together SCEPman and its corresponding Certificate Master instance.

AppConfig:DirectCSRValidation:Enabled

Linux: AppConfig__DirectCSRValidation__Enabled

Value: true or false

Description: This endpoint is required for the Certificate Master component. You must set this to true to use Certificate Master. Only Certificate Master is allowed to submit requests via this endpoint.

AppConfig:DirectCSRValidation:ValidityPeriodDays

Linux: AppConfig__DirectCSRValidation__ValidityPeriodDays

Value: Positive Integer

Description: This setting further reduces the global ValidityPeriodDays for the CSR endpoint. For example, you may define a value like 365 days here and set the global AppConfig:ValidityPeriodDays to 730. Then, certificates issued through Certificate Master will have one year validity, while certificates issued through other endpoints may be valid up to two years.

Usually, though, you will not configure anything here and instead reduce the validity for other endpoints, because server certificates from internal PKIs usually have a longer validity then client certificates.