The following device-specific variables are supported:<\/p>\n\n\n\n

\n
• %serialnumber%<\/code><\/li>\n\n\n\n
• %hostname%<\/code><\/li>\n\n\n\n
• %HardwareUUID%<\/code><\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
  \n
  1. In the Retry Count<\/strong> field, enter the number of times the device should retry if the server sends a Pending<\/em> response. The default is 3.<\/li>\n\n\n\n
  2. In the Retry Delay <\/strong>field, enter the number of seconds to wait between subsequent retries. The first retry is attempted without this delay. The default is 3. <\/li>\n\n\n\n
  3. In the Server URL<\/strong> field, enter the SCEP server\u2019s URL. For example: http:\/\/scep-server\/cgi-bin\/pkiclient.exe<\/code>.<\/em><\/li>\n\n\n\n
  4. In the Name(Template Name) <\/strong>field, enter a unique name for the payload that\u2019s recognised by the SCEP server. For example, WiFi Certificate.<\/li>\n<\/ol>\n\n\n\n

     <\/p><\/div>

     Tip:<\/strong> \n

     If a CA has multiple CA certificates, this field is used to distinguish which is required.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

     \n
     1. In the Set Subject Alternative Name <\/strong>field, <\/strong>enter an alternate name for the SCEP certificate.<\/li>\n\n\n\n
     2. Select the Include Root Certificate <\/strong>checkbox to upload the certificate for the Certificate Authority to add to the device\u2019s trusted anchors list.<\/li>\n<\/ol>\n\n\n\n

        <\/p><\/div>

        Note:<\/strong> \n

        \n
        • The root certificate can be installed manually, using an install certificate policy, or using a SCEP policy. <\/li>\n\n\n\n
        • If you selected Include Root Certificate<\/strong>, click upload file for Root Certificate. File size must be smaller than 1 MB. <\/li>\n\n\n\n
        • This certificate should be in the .cer or .crt format. If the root CA is from Okta, the file must be in .cer format.<\/li>\n\n\n\n
        • This certificate should not include public keys.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
          \n
          1. (Mandatory) Enter the Renew Period<\/strong> value in days. The number of days must be less than the root CA expiry date.<\/li>\n<\/ol>\n\n\n\n
             \n
             1. Once you are done, click Save<\/strong>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

                This policy configures Simple Certificate Enrollment Protocol (SCEP) for your Windows devices. SCEP makes issuing digital certificates easier, more secure, […]<\/p>\n","protected":false},"author":223,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2852,2862],"support_tag":[],"coauthors":[3144],"acf":[],"yoast_head":"\n