{"id":2774,"date":"2024-03-28T05:16:01","date_gmt":"2024-03-28T04:16:01","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/?post_type=knowledgebase&p=2774"},"modified":"2024-05-06T06:43:21","modified_gmt":"2024-05-06T04:43:21","slug":"scep","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/configuration-windows-10-pc\/general\/security-management\/certificate-management\/scep\/","title":{"rendered":"SCEP"},"content":{"rendered":"\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Description<\/p>
\n <\/td>


\n

SCEP Server description<\/p>
\n <\/td>\n<\/tr>\n


\n

Deployment Scope<\/p>
\n <\/td>


\n

Certificate deployment scope: Current Device vs User<\/p>
\n <\/td>\n<\/tr>\n


\n

SCEP Server URLs<\/p>
\n <\/td>


\n

One or more servers that issue certificates through SCEP<\/p>
\n <\/td>\n<\/tr>\n


\n

Subject<\/p>
\n <\/td>


\n

Representation of a X.500 name. E.g. “C=US, O=Microsoft Corporation, CN=foo, 1.2.5.3=bar”<\/p>
\n <\/td>\n<\/tr>\n


\n

Subject alternative names<\/p>
\n <\/td>


\n

Type<\/p>
\n <\/td>


\n

Email address<\/p>
\n <\/td>\n<\/tr>\n


\n

DNS<\/p>
\n <\/td>\n<\/tr>\n


\n

URI<\/p>
\n <\/td>\n<\/tr>\n


\n

User Principal Name (UPN)<\/p>
\n <\/td>\n<\/tr>\n


\n

CA Fingerprint<\/p>
\n <\/td>


\n

The SHA1 fingerprint of the Certificate Authority certificate. E.g. 31:8F:1E:78:5C:D5:12:9F:7E:3B:AD:F3:1C:C0:19:03:96:43:A9:E5<\/p>
\n <\/td>\n<\/tr>\n


\n

Validity period units<\/p>
\n <\/td>


\n

Days, Months or Years<\/p>
\n <\/td>\n<\/tr>\n


\n

Validity period<\/p>
\n <\/td>

<\/td><\/td><\/td><\/td>\n<\/tr>\n

\n

Challenge<\/p>
\n <\/td>


\n

Used as the pre-shared secret for automatic enrollment<\/p>
\n <\/td>\n<\/tr>\n


\n

Retries<\/p>
\n <\/td>


\n

The number of times the device should retry if the server sends a PENDING response. The default value is 5. Maximum value is 30.<\/p>
\n <\/td>\n<\/tr>\n


\n

Retry delay<\/p>
\n <\/td>


\n

Number of minutes to wait before retry. The default value is 5. The minimum value is 1.<\/p>
\n <\/td>\n<\/tr>\n


\n

Key size<\/p>
\n <\/td>


\n

Key size in bits<\/p>
\n <\/td>\n<\/tr>\n


\n

Hash algorithm<\/p>
\n <\/td>


\n

Hash algorithm family<\/p>
\n <\/td>\n<\/tr>\n


\n

Key usage<\/p>
\n <\/td>


\n

The key usage extension defines the purpose (e.g., encipherment, signature) of the key contained in the certificate. At least one of the “Digital signature” or “Key encipherment” needs to be selected.<\/p>
\n <\/td>\n<\/tr>\n


\n

Extended key usage<\/p>
\n <\/td>


\n

Specifies extended key usages.Subject to SCEP server configuration. Specify the list of corresponding OIDs, e.g. 1.3.6.1.5.5.7.3.2 (Client Authentication)<\/p>
\n <\/td>\n<\/tr>\n


\n

Key location<\/p>
\n <\/td>


\n

The Key Storage Provider to install the private key to.<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

TPM. Fail if no TPM present<\/p>
\n <\/td>\n<\/tr>\n


\n

TPM. If no TPM present, fallback to Software KSP<\/p>
\n <\/td>

<\/td>\n<\/tr>\n

\n

Software Key Storage Provider<\/p>
\n <\/td>

<\/td>\n<\/tr>\n

\n

Windows Hello for Business<\/p>
\n <\/td>


\n

Container name<\/p>
\n <\/td>


\n

Specifies the Windows Hello for Business (formerly known as Microsoft Passport for Work) container name.<\/p>
\n <\/td>

<\/td>\n<\/tr>\n

\n

PIN prompt text<\/p>
\n <\/td>


\n

Specifies the custom text to show on the Windows Hello for Business PIN prompt during certificate enrollment.<\/p>
\n <\/td>

<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n
<\/div>\n","protected":false},"parent":2762,"menu_order":0,"template":"","class_list":["post-2774","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/2774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":4,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/2774\/revisions"}],"predecessor-version":[{"id":6934,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/2774\/revisions\/6934"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/2762"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/media?parent=2774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}