22 Jun Luckily for us, SCEP supplies a solution to streamline the enrollment that is certificate on managed products so an administrator can automatically enroll every managed device for a client certificates without requiring any person conversation.

Simple Certificate Enrollment Protocol (SCEP) Explained

What's SCEP?

Simple Certificate Enrollment Protocol, or SCEP, is really a protocol which allows products to easily enroll for the certificate using a URL and a shared secret to keep in touch with a PKI. Mobile Device Management (MDM) software commonly uses SCEP for products by pushing a payload containing the SCEP URL and shared secret to managed devices. This might conserve an administrator considerable time and effort set alongside the alternative of manually enrolling their devices that are managed certificates.

Aspects of a SCEP Gateway

Here, we will go over the core components within the SCEP gateway.

SCEP Gateway API URL

Simple Enrollment that is certificate Protocol devices just how to keep in touch with the PKI, through the use of a Gateway API Address. Customers SecureW2 that is using can produce a SCEP Gateway API URL with this software. Then, they can place this URL within their MDM so it can deliver a payload to devices they wish to register on their own for client certificates.

SCEP Shared Secret

A Shared Secret is a password that is case-sensitive between the SCEP host and Certificate Authority (CA). This shared key verifies the CA with the right server for signing certificates. With SecureW2’s solution, the product presents the provided secret to your Managed PKI and then the certificate enrollment happens on the unit.

SCEP Certification Request

When the SCEP gateway is established and also the Shared Secret is provided between the SCEP server and CA, it is possible to produce and distribute a configuration profile that may enable handled devices to auto-enroll for certificates.