Microsoft Intune SCEP

Certification Profile for Device Enrolment – Microsoft Intune SCEP

Expand External Services > Certification Profiles from the left menu. The system will display the certification profiles listing screen.

To add a new certification profile, click the ‘+’ button on the left side of the table header. The system displays the ‘Profile’ screen.

The Profile screen consists of the following two sections:

Basic Information
Service

Basic Information

The Basic Information section displays the following fields:

Field	Description
Name	Specify a unique name for this profile.
Description	Specify any description related to this certification profile. (Optional)

Service

The Service section displays the following fields:

Field	Description
ADSS Service	This field will display the ADSS Services (i.e. Certification Service and CSP Service) that are available for ADSS Web RA. Select the ‘Certification Service’ option from the dropdown.
ADSS Certification Server	This field will display the list of active ADSS connectors in ADSS Web RA. Select the one to use for this certification service profile, for example: 192.168.2.64.
ADSS Certification Service Profile	In this field, enter the certification profile that you created on the ADSS Sever, for example: adss:certification:profile:001.
Active	Select this checkbox to make the profile active.

You can view the details of the selected ADSS connector by clicking the ‘Eye’ icon next to the connector name. When you click the icon, the system displays the ‘Connector’ dialog on the screen containing the information.

To view complete details of the connector, navigate to the ‘Details’ tab.

After providing the required information on the 'Profile' screen, click the next ‘>’ button to proceed to the ‘Profile Settings’ screen.

Profile Settings

The Profile Settings screen consists of the following sections:

Certificate Information
ADSS Server Client Secret
Certificate Enrolment
Verification
Open MPIC
Go Sign Token

Certificate Enrolment

To create a certification profile for 'Microsoft Intune SCEP' enrolment protocol, follow the instructions mentioned in the table below:

Field	Description
Certificate Enrolment	This dropdown displays the following options: None – Select this option if you want to create a simple certification profile. Enrolment Protocol(s) - It enables you to create a device enrolment profile. If you select this option, an additional dropdown named "Select Enrolment Protocol(s)" appears on the screen, allowing you to select the required enrolment protocol(s). Windows Enrolment – If this option is selected, an additional dropdown appears that allows you to select the "Active Directory Profile".
Enrolment Protocol(s)	This dropdown displays the following enrolment protocols: SCEP Microsoft Intune SCEP CMP ACME EST Select the ‘Microsoft Intune SCEP’ option from the dropdown to create the certification profile for this protocol. The system will then display the following additional fields on the screen: Microsoft Intune SCEP Connector Microsoft Intune SCEP Device Certificate
Microsoft Intune SCEP Connector	From this dropdown, select the ‘Azure Active Directory’ connector that contains the device-related information.

After configuring 'Microsoft Intune SCEP' enrolment protocol on the 'Profile Settings' screen, click the next ‘>’ button to navigate to the ‘Details’ screen. Set the options in the 'Details', and 'Settings' screens to their default values. The operator can also modify these configurations as needed.

For detailed information about the fields available on the 'Details', and 'Settings' screens for configuring the Certification Service profile, refer to the 'Certification Service Profile' page.

If you want to continue with default values, then after completing the configuration in the Settings tab, click 'Create' to set up the certification profile.