We fixed that but in my case it was a misconfiguration in the SCEP
server side, a device certificate was required to make the handshake
with NPS server then the cert from SCEP could be issued. There was some
minus settings we had to change as well li...