Summary

Automate certificate enrollment from SCEP servers for device identity and secure onboarding.

Prerequisites

• zTC with SnapOS ≥1.3
• Administrator access to SCEP server URL and challenge code
• Device not managed by zMAN (tool is disabled under management) :contentReference[oaicite:5]{index=5}.

Procedure

1. Start → Applications → SCEP Configurator.
2. Click “SCEP Server” → enter Server URL and Challenge Code → Next.
3. Fill in certificate subject fields → Apply → reboot to complete enrollment.

FAQs

What formats are supported?

SCEP issues X.509 certs; no file import is needed.

How do I revoke?

Use your SCEP CA’s revocation tools; zTC will request a new cert on next enrollment if configured.