glueckkanja / gk-scepman

SCEPman | Intune SCEP-as-a-Service

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

SCEPMan

This repository was moved to github.com/scepman/install

Abstract

SCEPman implements an unattended Certificate Authority for Microsoft Intune based certificate deployment described in this document:

“In Microsoft Intune, you can add third-party certificate authorities (CA), and have these CAs issue and validate certificates using the Simple Certificate Enrollment Protocol (SCEP). Add third-party certification authority provides an overview of this feature, and describes the Administrator tasks in Intune.”

The implementation is a .net core C# based Azure WebApp providing the SCEP and Intune API, using Bouncy Castle to implement the necessary certificate request handling and Azure Key Vault based RootCA and certificate signing. No other component needs to be involved, neither a database nor any other stateful storage except the Key Vault. That said, the concept will not need any backup procedures.

Please see https://glueckkanja.gitbook.io/scepman/ for full documentation.

Deployment

For deployment please refer to the current GitHub Repository

About

SCEPman | Intune SCEP-as-a-Service