This documentation explains the installation and setup of the Microsoft certificate authority (CA) for direct integration with Workspace ONE UEM over the NDES/SCEP/MSCEP protocol. This setup allows Workspace ONE UEM to take advantage of digital certificates by automating the issuing, renewal, and revocation process to mobile devices.

Since there is not much difference between NDES, SCEP, and MSCEP (mostly dependent on the version of MS Server), this documentation may be used for all three protocols.