iOS: SCEP Enrollment - Certificate Renewal

[DjeeeD]

Dear Community,

We successfully created a SCEP Policy to push certificates to our iOS devices.

It uses a OnPremise NDES Server and Microsoft PKI (via Azure Application Proxy).

Certificates have a lifetime of 1 year.

Does anyone know, if Intune automatically starts a renew process before expiration date?

I received information from one consultant that they are not automatically renewed. But this would mean I have to manually monitor each expiration date and trigger somehow the renewal.

Can't image that this is the desired behaviour.

THanks a lot,

Chris

[#2 · Accepted solution]

In the Configuration Profile there is a renewal theshold percentage, this is 20% by default I think. At 20% of the life-time, it will contact the server again to request a new one.. You should check your Configuration Profile for your setting.

[#3]

@Harm_Veenstra 

Hello Harm,

Thanks a lot. Seems that I missed that part :)

That answers my question!

[#4]

No problem, please mark my answer as solution to mark it as solved