This site uses cookies to deliver its service and to analyse traffic. By browsing this site, you accept the .

We strongly recommend configuring all use-case relevant certificate payloads (trusted certificate / SCEP certificate) in a single Configuration Profile in Jamf Pro.

SCEPman, a cloud-based certificate authority (CA), integrates seamlessly with MDM platforms, such as Intune and Jamf Pro, automating the entire lifecycle of X.509 certificates — from generation and renewal via SCEP or EST to revocation via CRL or OCSP.

In this session, we look at two 100% cloud-based solutions that we can implement with the help of Jamf Pro. 1) SCEPman: A slim and resource-friendly solution to issue and validate certificates using SCEP. It is an Azure Web App providing the SCEP protocol and works directly with the Microsoft Graph and Intune API.

Description: This setting helps you to request certificates via the Jamf MDM system. True: SCEPman listens at the additional SCEP server endpoint with the path /jamf. Use in conjunction with AppConfig:JamfValidation:RequestPassword. False (default): SCEPman does not issue certificates for Jamf. Applicable to version 2.8 and above.

When certificates are distributed using the SCEP protocol, traffic goes directly to DigiCert PKI Platform. Traffic does not proxy through Jamf Pro. This enables both dynamic challenges and automatic revocation to harden your certificate security in SCEP workflows. The procedure involves the following steps: Log in to the DigiCert PKI Platform.

2020年10月6日 · We do not want to expose our SCEP server to the internet, or use an external/JAMF CA as we already have it working on Windows so the JAMF SCEP Proxy idea is out. Are there limitations to what the JAMF/Intune Integration can do? Can I create a SCEP policy in Intune and have it work on Macs enrolled in JAMF?

SCEPman is your cloud-based certification (CA) authority. It easily enables your Intune and Jamf Pro managed clients for certificate based WiFi authentication. But SCEPman can do more: You...

2023年9月4日 · No, there were three alternatives; starting a certificate server (SCEPman); migrating to JAMF Pro, or, in our case, the service provider for all our services, offered VMware.

Via SCEPman's static interface and a challenge password enrolled devices will be able to obtain certificates. In addition, Jamf acts as SCEP Proxy for configuration profiles.