Perform the following steps to configure your SCEP endpoint.
Navigate to Devices > Certificates > Certificate Authorities. Select Add.
The Add/Edit certificate authority page displays.
Select Generic SCEP from the Authority Type drop-down.
Enter the following information pertaining to your SCEP Endpoint:
The friendly name of your certificate authority in AirWatch.
An optional field that you can use to give details about this defined-CA, its usages, etc.
The type of certificate authority being defined in AirWatch.
The type of SCEP provider AirWatch is integrating with, Basic is the only option supported currently. (This field cannot be changed.)
The URL the device will use during certificate enrollment.
Allows the admin to choose between static challenge and no challenge.
If static challenge is selected, this is the necessary challenge the device must have in order to get its CSR signed by the CA.