Now Loading
Logo Image

Proget Console

Home  /  Proget Console  /  Administrator guide  /  Profiles  /  SCEP

SCEP

SCEP profile automatically configure request the user certificate to authenticate the client without specifying domain credentials.

Compatibility:

  • Android Enterprise Device Owner
  • Android Enterprise Profile Owner
  • Samsung Knox

PROFILE_SCEP_MAP'
1 Name
  • Enter the name of the SCEP profile
  • Maximum length of the text is 255
  • Required
2 Basic configuration
PROFILE_SCEP_DATA

Access address
  • Enter the name of the URL for the SCEP server (eg. Network Device Enrollment Service)
  • Only 80 (HTTP) port is supported by default
  • Exemplary URL: http:///certsrv/mscep/mscep.dll
  • Maximum length of the text is 255
  • Required
CA ID
  • Enter the name of the profile for SCEP servers (eg. Network Device Enrollment Service) that support named-profiles.
  • Maximum length of the text is 255
Subject
  • Global variables available
  • Required
Encryption Algorithm
  • Type of encryption algorithm. Defines how strong security will be.
  • One of:
    • DES
    • DES3
    • AES128
    • AES192
    • AES256
  • Required
Encryption signature
  • Type of encryption signature. Defines how strong security will be.
  • One of:
    • SHA1
    • SHA256
    • SHA384
    • SHA512
  • Required
Key length
  • Length of the key. Defines how strong security will be
  • One of:
    • 1024
    • 2048
    • 3072
    • 4096
  • Required
Fingerprint
  • Enter the fingerprint of the CA issuing the root certificate on SCEP server (eg. Network Device Enrollment Service)
  • Maximum length of the text is 500
  • Required
Password
  • Enter the enrollment challenge password generated during a SCEP server deployment
  • The value should be a 32-digit string of alphanumeric characters
  • Maximum length of the text is 255
  • Required
Key encipherment
  • If checked, use as key encipherment
  • Use when the sender and receiver of the public key need to derive the key without using encryption
Digital signature
  • If checked, use as digital signature
  • Specific type of signature that is backed by a digital certificate. It’s providing proof of your identity
3 Alternative names
PROFILE_SCEP_ALTERNATIVE_NAMES

Type
  • One of:
    • Distinguished_Name
    • NT_principal_Name
    • RFC822_Name
    • DNS_Name
  • Required
Value
  • Global variables available
  • Required
Remove
  • Removes added alternative name
Clear
  • Removes all alternative names added to list
Add
  • Adds alternative name to list