In Microsoft Intune, you can add third-party certificate authorities (CA), and have these CAs issue and validate certificates using the Simple Certificate Enrollment Protocol (SCEP). SCEPman is a fully unattended Certificate Authority using Azure Key Vault for Microsoft Intune based device certificate deployment. SCEPman is a .net core C# based Azure WebApp providing the SCEP and Intune API, using Azure Key Vault based RootCA and certificate signing. No other component is be involved, neither a database nor any other stateful storage except the Key Vault. That said, the SCEPman will not need any backup procedures.