Skip to content

Introduction

Welcome to EasyScep, the easy-to-use certificate authority built specifically for Microsoft Intune.

You can find additional information on our Product Page and on the Azure Marketplace where you can also create your subscription directly.

What is EasyScep

EasyScep is Azure-based SaaS Certificate Authority built for Microsoft Intune that issues client certificates based on SCEP protocol. It supports both User and Device certificates.

Key Features

  • SaaS Certificate Authority — Fully managed, no on-premises infrastructure required
  • SCEP Protocol — Native SCEP support for seamless integration with Microsoft Intune and other MDM platforms
  • Intune Integration — Deep integration with Microsoft Intune for automated certificate deployment to users and devices
  • OCSP & CRL — Real-time certificate revocation checking via OCSP and CRL endpoints
  • Multi-region High Availability — Deploy across multiple Azure regions for maximum uptime
  • RBAC Access Control — Role-based access control to manage who can administer your CA
  • Generic SCEP Support — Shared secret support for non-Intune SCEP clients

System Requirements

  • An active Azure subscription (for billing and provisioning via the Azure Marketplace)
  • Microsoft Intune tenant (for certificate deployment to managed devices)
  • Global Administrator role (required for initial Intune integration consent)
  • Supported client platforms: Windows 10/11, iOS/iPadOS, Android, macOS

Getting Started

  1. Subscribe on Azure Marketplace and complete the on-boarding wizard
  2. Follow the On-boarding Guide to configure your Certificate Authority
  3. Deploy certificates to your devices using the Intune Setup Guide

About the documentation

In this documentation we give a brief introduction to on-boarding in the Azure Marketplace, configuration in Microsoft Intune and practical use examples for client certificate based authentication.

We recommend that you search additional information about PKI solutions and your specific usage scenarios on your software and hardware vendor sites.

Works great with EasyRadius

EasyScep pairs seamlessly with EasyRadius, our SaaS RADIUS service. Use EasyScep to issue client certificates and EasyRadius to authenticate them for enterprise Wi-Fi and LAN access via EAP-TLS — a complete, cloud-native certificate-based authentication solution.