This listing is for deploying the SCEPman binaries in your Azure tenant. The installation starts out as SCEPman Community Edition and can be upgraded to SCEPman Enterprise Edition using a license key.

Overview
SCEPman is a cloud-based Public Key Infrastructure (PKI) that automates the entire X.509 certificate lifecycle for clients, servers, and IoT devices via the SCEP protocol. Seamlessly integrating with MDM platforms such as Intune, Jamf Pro, and others, it provides automatic issuance, renewal, and revocation of certificates using the SCEP protocol.

Its object binding feature links certificates to users or machines, revoking them in real-time when needed, minimizing administrative tasks. SCEPman also supports TLS/SSL certificates for server authentication and integrates with RADIUSaaS for secure network access.

SCEPman is a fully integrated PKI, providing a (hierarchical) certificate authority (CA), OCSP responder, CRL distribution point (CDP) and web UI, where all components are deployed in three simple steps.

Fully hosted in your Azure tenant, it ensures data sovereignty, automatic updates, and geo-redundancy for enhanced security.

• Automate the entire X.509 certificate lifecycle
• Maintain full sovereignty with zero-trust architecture
• Secure your network with certificates for WiFi, LAN, and VPN
• Protect servers with automated TLS/SSL certificates
• Sign code, emails, and documents with trusted identities
• Strengthen security with phishing-resistant access control
• Securely authenticate your IoT devices
• Deployment and premium support included in Enterprise Edition
• Combine SCEPman with RADIUSaaS for seamless network authentication

Choose Your SCEPman Edition
SCEPman is available in two flavors: Community Edition and Enterprise Edition.

SCEPman Community Edition is great for:

• Lab environments
• Businesses with less than 25 employees

SCEPman Enterprise Edition is recommended for production environments and includes the following features (free trial available):

• SLA-based support services
• Manual certificate management, e.g. for web servers
• Redundancy for high availability
• SCEPman as intermediate CA
• Entra ID / AAD device compliance check
• Entra ID auto real-time revocation check for third-party MDMs (Jamf Pro, Kandji, Mosyle, SOTI MobiControl)

How to Get a FREE 30-day Enterprise Edition Trial?

1. Get your trial license key here
2. Follow our Getting Started Guide

SCEPman + RADIUSaaS = Seamless & Secure Network Access
If you like how easy SCEPman makes it to roll out a PKI, you’ll love how simple it is with RADIUSaaS to switch on certificate-based network access. Also built by glueckkanja, RADIUSaaS is SaaS-hosted and integrates with Microsoft 365 & Jamf Pro client management. Get your free 30-day trial of RADIUSaaS here.