How To Distribute Certificates Using SCEP in ManageEngine Mobile Device Manager Plus

Рет қаралды 349

Күн бұрын

In this video, we show how easy it is to setup a #cloudbased Certificate Authority and #PKI for distributing #SSL certificates in #ManageEngine Mobile Device Manager Plus using #SCEP.
Get Started with EZCA: www.keytos.io/azure-pki.html
CRL VS OCSP video: • CRL vs. OCSP: Certific...
0:00 Introduction
0:18 How to Create a Cloud CA
2:23 Download CA certificates
2:55 How to add a CA Server to Manage Engine MDM Plus
3:25 Create certificate template in Manage Engine
5:20 Create Device Profile in Manage Engine MDM
6:22 Assign profile to device
6:50 Verify Certificate was issued to device

Пікірлер: 2

@bubbanc 7 ай бұрын

I notice there is no password or other authorization information other than the SCEP URL being unique and difficult to guess. If someone has your SCEP URL could they enroll into your service without having any passphrase and obtain a certificate for your infrastructure? If the SCEP URL is the only thing authorizing enrollment creation, then it might be good to note that in the UI (please keep this URL private). I also assume that that URL is not embedded into the certs issued?

@keytos 7 ай бұрын

Hi thanks for your comment - while the experience seems simple, what happens in the backend is more complex; we talk about it at 4:30, but the gist is that each request has an encrypted password that is set by the MDM and EZCA (Intune sets their own, some MDM solutions only support a static password that is encrypted with the CA public key meaning that the CA is the only one that can access it, and some support dynamic challenge requests meaning that each specific request has it's own password set by the CA (this one is also encrypted), if you are interested, we have a full deep dive on how SCEP works in this video kzfaq.info/get/bejne/msdmf9WCr8m3l6c.html please let us know if you have other questions