Overview
SCEPman is your cloud-based certification authority. It easily enables your Intune- and Jamf-managed clients for certificate based WiFi authentication. But SCEPman can do more.

SCEPman can issue certificates for

• Clients based on the SCEP protocol (devices & users)
• AD Domain controllers (Hybrid Key Trust for WHFB)
• Servers (TLS/SSL certificates)

SCEPman validates certificates with the modern OCSP protocol. For each validation, SCEPman checks the corresponding device/user with your identity provider (Azure AD or Jamf).

SCEPman is an Azure App, that runs in your Azure tenant. You can install it within minutes and operations is super-easy.

What additional resources are required?
SCEPman is a native Azure App that leverages additional Azure resources to provide state-of-the-art security, convenience during deployment and effortless operations. The minimum set of required Azure resources that are automatically deployed with SCEPman is comprised of an

• Azure App Service Plan
• Azure KeyVault
• Azure Storage Account

Azure costs are generated by these resources.

SCEPman Community Edition (CE) vs. Enterprise Edition (EE)
We offer SCEPman in a free and unsupported Community Edition that we recommend for

• Lab environments
• Small businesses
• Lightweight testing of SCEPman.

If you would like to test SCEPman CE in your tenant, please directly deploy it from this offering and leave the License Key field in the subsequent ARM-deployment empty.

If you are looking for an enterprise-grade solution, we recommend SCEPman EE that provides you with a richer set of features as well as our expert support. In order to deploy SCEPman EE into your tenant, you require a license key first, which you can retrieve by

• Purchasing a subscription of SCEPman directly from the Azure Marketplace here.
• Or by requesting a separate trial from our website.