Frequently Asked Questions (FAQ)
EasyScep Feature Overview
| Feature | Supported |
|---|---|
| Subscription | |
| SaaS solution | X |
| Available in Marketplace | X |
| Available as monthly subscription | X |
| Available as yearly subscription | X |
| Multi-region High Availability | X |
| RBAC Access control | X |
| Integrations | |
| Intune integration | X |
| Generic SCEP Support (Shared secret) | X |
| Certificate Authority | |
| OCSP Support | X |
| CRL Support | X |
| Radius Functionality | |
| Compatible with EasyRadius for EAP-TLS Client Certificate Authentication | X |
Do you have any discounts available
We offer 20% discount to non-profit organizations. Reach out to sales for further information.
Can I use EasyScep without Intune?
Yes. Set Request Validation Mode to SharedSecret (or Any, to accept Intune requests as well) under Settings, and configure your SCEP client with the SCEP URL from the dashboard and the shared secret as its challenge password. You can also issue certificates by hand, or sign a CSR, under New certificate. See the administration portal guide.
How quickly does a revocation take effect?
Immediately for devices and RADIUS servers that check through OCSP. Devices that check the CRL may keep using a cached copy for up to 2 hours. Revocations requested by Intune are picked up within about 5 minutes. See Revoking a certificate.
Intune SCEP Certificate Deployment Troubleshooting
Known platform issues
Android
- On some newer Android versions, SCEP endpoint must be accessed using HTTPS.
- BYOD Work Profile: the SCEP profile must issue a User certificate (not a Device certificate), and the User Principal Name (UPN) must be in the certificate's Subject Alternative Name (otherName OID
1.3.6.1.4.1.311.20.2.3), not only the Common Name. Otherwise the Wi-Fi/VPN profile fails to bind — often silently. See the Android Enterprise (BYOD Work Profile) guide.
Windows
- Faulty TPM module. On windows use
tpmtool getdeviceinformationcommand to get tpm information. Ensure bios and TPM firmware is up to date.
Troubleshooting Steps
Check Intune Portal:
- Review device configuration status
- Check error messages in device profiles
- Verify SCEP profile settings
- Confirm device enrollment status
Device-side Verification:
- Check certificate store for deployed certificates
- Review MDM diagnostic logs
- Verify network connectivity to SCEP endpoint
SCEP Configuration:
- Validate SCEP profile settings
- Check certificate template requirements
- Verify authentication settings
How do I unsubscribe ?
All management of your SaaS subscriptions and plans must be done through the Azure Portal. You can see and manage all your SaaS subscriptions if you follow this link.