This document explains the installation and setup of the Microsoft certificate authority (CA) for direct integration with AirWatch over the NDES/SCEP/MSCEP protocol. This setup allows AirWatch to take advantage of digital certificates by automating the issuing, renewal, and revocation process to mobile devices.

Since there is not much difference between NDES, SCEP, and MSCEP (mostly dependent on the version of MS Server), this document may be used for all three protocols.