SCEP或简单证书注册协议^{(Simple Certificate Enrollment Protocol)}，是一种允许设备使用URL和密钥注册证书的协议。在Windows 10设备上，可以使用Intune 将^{(Intune to deploy)} SCEP证书部署到 Windows 10 设备。

但是，在您更新任何根证书颁发机构（CA）的证书或颁发 CA 后，SCEP证书部署失败，那么这篇文章将帮助您解决它。

有多种方法可以确定是否发生了错误：

• Intune门户中的部署状态
• 在Windows 10设备上，事件 32 和 307 记录在管理^(Admin)日志中。
• 事件 30 记录在 CAPI2 日志中，

证书背后的原因是因为颁发给 CA 的证书仍然是指旧的 CA 证书。作为回报，这会导致错误，因为它们不再受信任。

续订 CA 证书后， SCEP^(SCEP)部署到Windows 10设备失败

NDES（网络设备注册服务^{(Network Device Enrollment Service)}）是Microsoft的一项服务，它允许在没有域凭据的情况下运行的设备获取基于SCEP的证书。根据Microsoft的说法，您需要在 NDES 服务器上重新安装NDES服务器角色^(NDES)和Microsoft Intune 连接器^{(Microsoft Intune Connector)}。在重新安装过程中，将重新颁发证书，问题将得到解决。

重新安装方法是一个三步过程，包括安装NDES服务器、配置NDES服务器和在^(NDES)Intune门户中创建SCEP配置文件。在安装过程中，  NDES将执行以下步骤来获取证书。

• 生成并向管理员提供一次性注册密码
• 向 CA 提交注册请求
• 从 CA 检索已注册的证书并将其转发到网络设备。

有趣的是，这个问题是特定于Windows设备的，不会发生在Android和 iOS 设备上。

因此，如果您遇到问题，您需要做的就是重新安装它们，它会自行解决。

SCEP deployment to Windows 10 fails after you renew CA certificate

SCEP or Simple Certificate Enrollment Protocol, is a protocol that allows devices to enroll for a certificate using a URL and a secret key.  On Windows 10 devices, you can use Intune to deploy SCEP certificates to Windows 10 devices.

However, after you renew the certificate of any root certification authority (CA) or issuing CA, SCEP certificate deployment fails, then this post will help you resolve it.

There are multiple ways to find out if the error has occurred:

• Deployment status in the Intune portal
• On the Windows 10 device, event 32 and 307 are logged in Admin logs.
• Event 30 is logged in CAPI2 log,

The reason behind that the certificates are because certificates that are issued CA still refer to the old CA certificate. This, in return, results in an error as they are no longer trusted.

SCEP deployment to Windows 10 devices fails after you renew the CA certificate

NDES ( Network Device Enrollment Service) is a service from Microsoft which allows devices running without domain credentials to obtain certificates based on the SCEP. According to Microsoft, you need to reinstall both the NDES server role and Microsoft Intune Connector on the NDES server. During the reinstallation,  certificates will be reissued, and the issue will be resolved.

The reinstallation method is a three-step process that includes installing the NDES server, configuring the NDES server, and creating the SCEP profile in the Intune portal. During the installation,  NDES will perform the following steps to get the certificate.

• Generates and provides one-time enrollment passwords to administrators
• Submits enrollment requests to the CA
• Retrieves enrolled certificates from the CA and forward them to the network device.

It is interesting to note that the problem is specific to Windows devices and does not happen on Android and iOS devices.

So if you have a problem, all you need to do is reinstall them, it will resolve itself.

Related posts

• 如何在Windows 10上禁用Feature Updates的保障措施

• 如何在Windows 10使用Network Sniffer Tool PktMon.exe

• Windows 10中Taskbar Context Menu中的Hide Toolbars option

• 如何在Windows 10上使用PIP安装NumPy

• 使用MyLauncher为Windows 10计算机启动文件

• Windows 10上的Fix Fast Battery drain使用Hybrid图形

• Windows 10 Lock Screen Make Firefox display Media Controls Lock Screen

• Event ID 158错误 - 同磁盘GUIDs assignment在Windows 10

• 如何在Windows 10查找和Notepad中的Replace Text

• Create Windows 10带PeperNote的简单注释

• 创建Keyboard Shortcut以在Windows 10中打开您最喜爱的Website

• Watch数字电视，并在Windows 10上收听Radio，ProgDVB

• 如何将Secure Delete添加到Windows 10中的context menu

• Picsart在Windows 10上提供Custom Stickers & Exclusive 3D Editing

• 解释Windows 10中的Modern Setup Host。它安全吗？

• Top 3 Reddit apps用于Windows 10，可在Windows Store提供

• Windows 10 Best免费Barcode Scanner software

• Taskbar在Windows 10上的Hide or Show Windows Ink Workspace Button

• 如何在Windows 10计算机上打开.aspx文件

• 如何改变Hard Disk Cluster Size在Windows 10