SCEP ama Hab-maamuuska Diiwaangelinta Shahaadada Fudud^{(Simple Certificate Enrollment Protocol)} , waa hab-maamuus u oggolaanaya aaladaha inay isku qoraan shahaado iyagoo isticmaalaya URL iyo fure sir ah. On Windows 10 aaladaha, waxaad isticmaali kartaa Intune si aad u geyso shahaadooyinka ^{(Intune to deploy)} SCEP Windows 10 aaladaha.

Si kastaba ha ahaatee, ka dib markaad cusboonaysiiso shahaadada hay'ad kasta oo shahaado-siinta xididka ah (CA) ama soo saarista CA, keenista shahaadada SCEP way^(SCEP) ku guuldareysatay, ka dib boostada ayaa kaa caawin doonta inaad xalliso.

Waxaa jira siyaabo badan oo lagu ogaan karo haddii qaladku dhacay:

• Heerka geynta gudaha Intune portal
• Qalabka Windows 10 , dhacdada 32 iyo 307 ayaa la galiyay diiwaannada maamulka^(Admin) .
• Dhacdada 30 waxay ku jirtaa diiwaanka CAPI2,

Sababta ka dambeysa in shahaadooyinka la bixiyo ayaa ah sababtoo ah shahaadooyinka la bixiyo CA ayaa wali tixraacaya shahaadadii hore ee CA. Tani, beddelkeeda, waxay keentaa khalad maadaama aan la aamini karin.

Gelitaanka SCEP^(SCEP) ee Windows 10 qalabku wuu guuldarraystaa ka dib markaad cusboonaysiiso shahaadada CA

NDES ( Adeegga Diiwaangelinta Aaladda Shabakadda^{(Network Device Enrollment Service)} ) waa adeeg ka socda Microsoft kaas oo u oggolaanaya aaladaha socda bilaa aqoonsiga domain inay helaan shahaadooyin ku salaysan SCEP . Sida laga soo xigtay Microsoft , waxaad u baahan tahay inaad dib u rakibto labadaba doorka server-ka NDES iyo ^(NDES)Microsoft Intune Connector ee server-ka NDES . Inta lagu jiro dib u rakibidda, shahaadooyinka ayaa dib loo soo saari doonaa, arrintana waa la xallin doonaa.

Habka dib-u-dajinta waa nidaam saddex-tallaabo ah oo ay ku jiraan rakibidda server-ka NDES , habaynta server-ka ^(NDES)NDES , iyo abuurista astaanta SCEP ee bogga ^(SCEP)Intune . Inta lagu jiro rakibidda,  NDES waxay samayn doontaa tillaabooyinka soo socda si ay u hesho shahaadada.

• Wuxuu abuuraa oo bixiyaa furaha isdiiwaangelinta hal mar maamulayaasha
• Waxay u gudbisaa codsiyada diiwaangelinta CA
• Waxay ka soo ceshanayaan shahaadooyinka diiwaangashan CA oo u sii gudbiya aaladda shabakadda

Waxaa xiiso leh in la ogaado in dhibaatadu ay gaar u tahay aaladaha Windows oo aysan ku dhicin aaladaha Android iyo iOS.

Markaa haddii ay dhibaato kaa haysato, waxa kaliya ee aad u baahan tahay inaad dib u rakibto, iyadu way xallin doontaa.

SCEP deployment to Windows 10 fails after you renew CA certificate

SCEP or Simple Certificate Enrollment Protocol, is a protocol that allows devices to enroll for a certificate using a URL and a secret key.  On Windows 10 devices, you can use Intune to deploy SCEP certificates to Windows 10 devices.

However, after you renew the certificate of any root certification authority (CA) or issuing CA, SCEP certificate deployment fails, then this post will help you resolve it.

There are multiple ways to find out if the error has occurred:

• Deployment status in the Intune portal
• On the Windows 10 device, event 32 and 307 are logged in Admin logs.
• Event 30 is logged in CAPI2 log,

The reason behind that the certificates are because certificates that are issued CA still refer to the old CA certificate. This, in return, results in an error as they are no longer trusted.

SCEP deployment to Windows 10 devices fails after you renew the CA certificate

NDES ( Network Device Enrollment Service) is a service from Microsoft which allows devices running without domain credentials to obtain certificates based on the SCEP. According to Microsoft, you need to reinstall both the NDES server role and Microsoft Intune Connector on the NDES server. During the reinstallation,  certificates will be reissued, and the issue will be resolved.

The reinstallation method is a three-step process that includes installing the NDES server, configuring the NDES server, and creating the SCEP profile in the Intune portal. During the installation,  NDES will perform the following steps to get the certificate.

• Generates and provides one-time enrollment passwords to administrators
• Submits enrollment requests to the CA
• Retrieves enrolled certificates from the CA and forward them to the network device.

It is interesting to note that the problem is specific to Windows devices and does not happen on Android and iOS devices.

So if you have a problem, all you need to do is reinstall them, it will resolve itself.

Related posts

• Sida loo damiyo Badbaadada Cusbooneysiinta Muuqaalka ee Windows 10

• Sida loo isticmaalo Network Sniffer Tool PktMon.exe gudaha Windows 10

• Ku qari ikhtiyaarka aaladaha gudaha Menu Macnaha guud ee Taskbar gudaha Windows 10

• Sida loo rakibo NumPy adoo isticmaalaya PIP Windows 10

• Ku billow faylasha si fudud myLauncher for Windows 10 kombiyuutarada

• Sida loo rogo fiidiyowyada Windows 10 PC

• Sida loo dhaqan geliyo Raadinta Badbaadada Google ee Microsoft Edge gudaha Windows 10

• Kumbuyuutarkan looma cusboonaysiin karo Windows 10 sababtoo ah Goobaha Kaydinta Lammaaniga ah

• Ashampoo WinOptimizer waa software bilaash ah si kor loogu qaado Windows 10

• Sida loo damiyo Cusbooneysiinta Dareewalka Tooska ah ee Windows 10

• Sida loo hawlgeliyo Windows 10 Enterprise Edition

• Sida loo soo bandhigo liiska Hotkeys Global gudaha Windows 10

• Encrypt Care waa software sir bilaash ah oo loogu talagalay Windows 10

• PicsArt waxa ay ku siisaa stickers Custom & Tafatirka 3D gaar ah Windows 10

• Waa maxay nidaamka splwow64.exe gudaha Windows 10 oo ma joojin karaa?

• Sharaxaada Martigeliyaha Habaynta Casriga ah ee Windows 10. Ammaan ma tahay?

• Samee Firefox ka samee kontaroolada warbaahinta ee Firefox Windows 10 Shaashada qufulka

• Sida loo awoodo sanduuqa raadinta dhaxalka ah ee File Explorer ee Windows 10

• Sida loo rakibo Profile Midabka gudaha Windows 10 adoo isticmaalaya Profile ICC

• Ka yeel ka-hortagga-xumeynta gudaha Windows 10 Hello Wajiga Xaqiijinta