How-To: Create Intune SCEP Profiles

In this section we will guide you on how to create an Intune profile to issue X509 certificates using SCEP for Windows, MacOS, Android and iOS.

Introduction - How to Create Intune SCEP Profiles

Now that we have created an Intune Certificate Authority (CA), is time to create the Intune SCEP profiles for the different devices your organization allows. There are two types of profiles you can create in Intune to issue certificates to your devices:

  1. Trusted Certificate Profile: This profile is used to deploy the CA certificate to the devices and establish trust between the devices and the CA. This profile is required for SCEP to work, as it allows the devices to trust the certificates issued by the CA.
  2. SCEP Certificate Profile: This profile is used to configure the SCEP settings and specify the CA that will be used to issue the certificates to the devices. This profile is where you will specify the SCEP URL, certificate information, and other settings related to the certificate issuance.

How to Create Intune SCEP Profiles for Each Device Platform

Ready to create your Intune SCEP profiles? Check out one of the platform-specific guides below to learn how to create Trusted Certificate Profiles and SCEP Certificate Profiles in Intune for each device platform:

How-To: Issue SCEP Certificates to Windows Devices with Intune

In this page we will guide you on how to create an Intune profile to issue X509 certificates either for devices or users using SCEP for Windows.

How-To: Issue SCEP Certificates to macOS Devices with Intune

In this page we will guide you on how to create an Intune profile to issue X509 certificates either for devices or users using SCEP for MacOS.

How-To: Issue SCEP Certificates to Android Devices with Intune

In this page we will guide you on how to create an Intune profile to issue X509 certificates either for devices or users using SCEP for Android.

How-To: Issue SCEP Certificates to Linux Devices with Intune

By default, Intune does not have SCEP profiles for Linux devices. However, you can use a custom profiles that will allow you to issue SCEP certificates to Linux devices.