SCEP Configuration

Prerequisite

Windows server is required for SCEP configuration

Note: Please contact to 42gears support team for SCEP server specification.

Step to configure the SCEP, follow the below steps:

Ensure that the scepcert application under suremdm/DefaultWebSite and scep in the application pool are kept in a running condition on a Windows machine.

Note:

1. Delete all additional files and folders within the suremdm/wwwroot directory and remove any applications and virtual directories from the default website, except scepcert.

Navigate to k8sopinstaller > appsettings > pluto > appsettings.json and add ScepApiUrl as http://windows_machine_local_ip/scepcert/suremdm if the deployment is with /suremdm. Otherwise, use http://windows_machine_local_ip/scepcert. Save the changes after making the modifications.

Navigate to k8sopinstaller > appsettings > jobtodeviceservice > appsettings.json and add ScepApiUrl as http://windows_machine_local_ip/suremdm if the deployment is with /suremdm. Otherwise, use http://windows_machine_local_ip. Save the changes after making the modifications.

Delete the pluto secrets and create them again by using following commands:
- Delete secrets: sudo kubectl delete secret pluto-secret -n suremdm
- Create secrets: sudo kubectl create secret generic pluto-secret --from-file="${PWD}/appsettings/pluto/appsettings.json" -n suremdm

Note: The system admin should execute these commands from the k8sopinstaller directory.

Delete the jobtodeviceservice secrets and create them again by using following commands:
- Delete secrets: sudo kubectl delete secret jobtodevice-secret -n suremdm
- Create secrets: kubectl create secret generic jobtodevice-secret --from-file="${PWD}/appsettings/jobtodeviceservice/appsettings.json" -n suremdm

Note: The system admin should execute these commands from the k8sopinstaller directory.

After making the changes, run the following command to restart the services:
kubectl rollout restart deployment -n suremdm