Windows 10: SCEP deployment to Windows 10 devices fails after you renew the CA certificate

SCEP or Simple Certificate Enrollment Protocol, is a protocol that allows devices to enroll for a certificate using a URL and a secret key. On […]

This article SCEP deployment to Windows 10 devices fails after you renew the CA certificate first appeared on TheWindowsClub.com.

read more...

 

SCEP Server(sub-CA) issues only once CA certificate instead of certificate chain

Hi ,

I configured a CA server in windows server 2008 with rootCA(windows server 2008)-->SubCA1(windows server 2008)--->SubCA2 (windows server 2008)

and configured NDES in SubCA2 and when I send a SCEP request to subCA2 .

It issues me a certificate and CA certificate(public key) and CA certificate only has subCA2 certificate but does not present a certificate chain .

But when I go to issued certificates in SubCA2 it shows the entire certification path till rootCA. Is there a way to send entire certificate chain to SCEP client or is this expected behavior

 

SCEP Certificate enrollment failed

Hi,

My laptop has started to crash with a buzzing sound which comes from the speakers. It does not matter if I am gaming or watching a movie, this behavior is random. Here are the error details:

SCEP Certificate enrollment for WORKGROUP\DESKTOP-7VNO1BL$ via https://INTC-KeyId-17a00575d05e58e3...639.microsoftaik.azure.net/templates/Aik/scep failed:

SubmitDone

Submit(Request): Bad Request

{"Message":"Attestation statement cannot be verified, rejecting request: 0x80070057."}

HTTP/1.1 400 Bad Request

Cache-Control: no-cache

Date: Tue, 01 Oct 2019 15:32:27 GMT

Pragma: no-cache

Content-Length: 86

Content-Type: application/json; charset=utf-8

Expires: -1

x-ms-request-id: 03feca3b-a6b9-4f6f-b726-dbbf09a2a5a9

Strict-Transport-Security: max-age=31536000;includeSubDomains

X-Content-Type-Options: nosniff

Method: POST(3188ms)

Stage: SubmitDone

Bad request (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)

Can anyone please help with a solution? Also, my wifi driver randomly fails, and I have to uninstall it from Device Manager to get it back to running again. Not sure if this is related.

 

6680 CA certificates

The CA certificate for SSL connections that I use is untrusted by the phone. How do I add the CA to the list of existing trusted certificates?