# Create a new SCEP server configuration. Returns a server_id for use when creating SCEP templates

Save the scep server credentials

## Endpoint

**POST** `/api/v1/mdm/scep/servers`

## Request

### Request URL

`https://{server-hostname}:8383/api/v1/mdm/scep/servers`

### Scope

`MDMDeviceMgmt.CREATE`

### Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Request Headers

- **Content-Type** (`string`, Mandatory): `application/json`
- **Accept** (`string`, Mandatory): `application/json`

#### Request Body

`application/json`

- `server_name` (`string`, Optional`): Display name for the SCEP server
- `type` (`string`, Mandatory): SCEP server type. 1=Microsoft SCEP, 2=EJBCA, 3=OpenXPKI, 4=Dogtag, 5=Custom, 101=Intune
- `url` (`string`, Optional): URL of the SCEP server endpoint
- `ca_certificate_id` (`string`, Optional): Certificate ID of the CA certificate uploaded via [Upload Certificate](https://www.manageengine.com/products/desktop-central/help/api/onpremise/certificates-upload-certificate.html)
- `ca_finger_print` (`string`, Optional): SHA-1 fingerprint of the CA certificate (hexadecimal string)
- `ca_type` (`integer`, Optional): CA type. 0=Root CA, 1=Intermediate CA, 2=External CA
- `redistribute_profiles` (`boolean`, Optional): Whether to redistribute profiles associated with this SCEP server when updated. Default: false
- `ra_certificate_id` (`string`, Optional): Certificate ID of the RA certificate (if different from CA). Obtain from the [Upload Certificate](https://www.manageengine.com/products/desktop-central/help/api/onpremise/certificates-upload-certificate.html) response
- `profile_oid` (`string`, Optional): OID for the certificate profile/template on the SCEP server
- `adcs_doc_ack` (`boolean`, Optional): Acknowledgement flag for ADCS documentation requirements. Default: false

### Sample Request

```curl
curl --request POST \
  --url https://appdomain/api/v1/mdm/scep/servers \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52' \
  --header 'Content-Type: application/json' \
  --data '{"ca_finger_print":"bf54330f3132d590d3d7c3e86ebc8563b5ea976e","server_name":"Sample","ca_certificate_id":"6967000000565073","type":"1","url":"http://10.51.79.112/certSrv/mscep/mscep.dll","redistribute_profiles":false}'
```

### Sample Request Body

Add a new Microsoft SCEP server

```json
{
  "ca_finger_print": "bf54330f3132d590d3d7c3e86ebc8563b5ea976e",
  "server_name": "Sample",
  "ca_certificate_id": "6967000000565073",
  "type": "1",
  "url": "http://10.51.79.112/certSrv/mscep/mscep.dll",
  "redistribute_profiles": false
}
```

## Response

### Response Parameters

#### HTTP Code 200

Response Body - `application/json`

- `server_id` (`string`): Unique identifier of the created SCEP server. Use this ID when creating SCEP templates via [Add SCEP Template](https://www.manageengine.com/products/desktop-central/help/api/onpremise/certificates-add-scep-template.html)
- `server_name` (`string`): Display name of the SCEP server
- `type` (`string`): SCEP server type. 1=Microsoft SCEP, 2=EJBCA, 3=OpenXPKI, 4=Dogtag, 5=Custom, 101=Intune
- `url` (`string`): URL of the SCEP server endpoint
- `ca_certificate_id` (`string`): Certificate ID of the CA certificate
- `ca_finger_print` (`string`): SHA-1 fingerprint of the CA certificate
- `adcs_doc_ack` (`boolean`): ADCS documentation acknowledgement flag
- `template_count` (`string`): Number of templates configured for this SCEP server

### Possible Response Codes

- **200** (`HTTP code`)

### Sample Response: HTTP 200

SCEP server configuration successfully created

```json
{
  "ca_finger_print": "bf54330f3132d590d3d7c3e86ebc8563b5ea976e",
  "server_name": "Sample",
  "ca_certificate_id": "6967000000565073",
  "adcs_doc_ack": false,
  "template_count": "0",
  "server_id": "6967000000599725",
  "type": "1",
  "url": "http://10.51.79.112/certSrv/mscep/mscep.dll"
}
```

## Rate Limits

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.