SCEP Proxy vs ADCS Connector - Whats the difference

[unclekev]

Hi

I've been searching around for an answer to this but cant find anything that answers it.

A) Whats the preferred option, Is using the SCEP Proxy preferred over using the ADCS Connector?

B) Is there any functionality difference between the two options once its set up? Or do they perform identical functions

Struggling to figure out what the difference is, and why I would go with one over the other.

I've got an environment where because of the organisations security requirements we need to use ADCS Connector instead of the SCEP Proxy functionality. I just want to make sure that the ADCS connector will provide the same "end state" functionality as using the SCEP proxy.

Any suggestions appreciated.

Thanks!
Kevin

[unclekev · Accepted solution]

Got the answer in MacAdmins Slack. Posting here for others

my main reason [for ADCS] is if you need multiple certificate templates, SCEP proxy becuase SCEP/NDES only lets you specify 1 template within the registry you can only use 1 template, ADCS Connector supports multiple templates - in terms of functionality and end user experience theres no real different between the two, just comes down to security and org requirements

[husnudagidir]

Hi,

Were you able to successfully deploy this by requesting a certificate from a Windows NDES server with a SCEP profile? I've been trying to do this for a while now but to no avail. My NDES server settings are correct. But I think I'm missing something in the SCEP settings in Jamf Pro.