Intune – Third party certification authorities is now supported for SCEP

One of the important security management responsibilities of Microsoft Intune is the ability to issue certificates to devices using the Simple Certificate Enrollment Protocol (SCEP).

Starting today, Intune now supports third party certification authorities for SCEP – starting with Entrust as first CA.

Support of Active Directory Certificate Services is still supported of course Smile

Below an high level diagram explaining how SCEP works with Intune (courtesy Microsoft)


To setup the third party CA support for Intune you need to use an open-source API ( and the administration portal.

The below high level diagram explains how SCEP is working with third party CA (courtesy Microsoft)


All details to set it up are available here

Leave a Comment

Your email address will not be published. Required fields are marked *

The reCAPTCHA verification period has expired. Please reload the page.