Create a new SCEP template under a SCEP server. Returns a scep_config_id for use in SCEP profile payloads

Save the SCEP Server template details

Endpoints

post /api/v1/mdm/scep/servers/{server_id}/templates

Copy full URL

Request URL

https://{server-hostname}:8383/api/v1/mdm/scep/servers/{server_id}/templates

Scope

MDMDeviceMgmt.CREATECopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Request Headers

Content-TypestringMandatory

application/jsonCopied!

AcceptstringMandatory

application/jsonCopied!

- Path Parameters

server_idstringMandatory

Unique identifier of the SCEP server. Obtain from Add SCEP Server response

- Request Body

application/json

JSON Object

Hide Sub-Attributes

scep_configuration_namestringMandatory

Display name for the SCEP template configuration (required)

challenge_typeintegerMandatory

Challenge type for SCEP enrollment. 0=None, 1=Static, 2=Dynamic (required)

key_usageintegerMandatory

Key usage for the certificate. 0=None, 1=Signing, 2=Encryption, 3=Both, 4=Digital Signature, 5=Key Encipherment (required)

subject_altname_typeintegerMandatory

Subject Alternative Name type. 0=None, 1=RFC 822 Name, 2=DNS Name, 3=URI, 4=NT Principal Name, 5=Uniform Resource Identifier (required)

key_sizeintegerMandatory

Key size for the certificate in bits (required). Common values: 1=1024, 2=2048, 4=4096

subjectstringOptional

Certificate subject DN. Supports variables like %serialnumber%, %email%, %udid%

namestringOptional

Friendly name for the SCEP template

nt_principalstringOptional

NT Principal name for the certificate

challengestringOptional

Static challenge password (required when challenge_type=1)

subject_altname_valuestringOptional

Subject Alternative Name value. Supports variables like %email%, %serialnumber%

retriesintegerOptional

Number of retries for SCEP enrollment. Default: 0

retry_delaystringOptional

Delay between retries in seconds. Default: 0

seat_idstringOptional

Seat ID variable for the certificate. Supports variables like %email%

domainstringOptional

Domain name for the SCEP server authentication

scep_admin_challenge_endpoint_urlstringOptional

URL for the dynamic challenge endpoint (required when challenge_type=2)

scep_admin_challenge_usernamestringOptional

Username for the dynamic challenge endpoint

scep_admin_challenge_passwordstringOptional

Password for the dynamic challenge endpoint

redistribute_profilesbooleanOptional

Whether to redistribute profiles when this template is updated. Default: false

renewal_settingsJSON ObjectOptional

Auto-renewal configuration for certificates issued by this template

Show Sub-Attributes

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request POST \
  --url https://appdomain/api/v1/mdm/scep/servers/%7Bserver_id%7D/templates \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52' \
  --header 'Content-Type: application/json' \
  --data '{"retries":0,"challenge_type":0,"scep_configuration_name":"Sample","key_usage":0,"retry_delay":"0","subject":"CN=%serialnumber%","seat_id":"%email%","name":"Sample","subject_altname_type":0,"subject_altname_value":"","key_size":1}'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/api/v1/mdm/scep/servers/%7Bserver_id%7D/templates"))
        .header("Content-Type", "application/json")
        .header("Accept", "application/json")
        .header("Authorization", " d92d4xxxxxxxxxxxxx15f52")
        .method("POST", HttpRequest.BodyPublishers.ofString("{\"retries\":0,\"challenge_type\":0,\"scep_configuration_name\":\"Sample\",\"key_usage\":0,\"retry_delay\":\"0\",\"subject\":\"CN=%serialnumber%\",\"seat_id\":\"%email%\",\"name\":\"Sample\",\"subject_altname_type\":0,\"subject_altname_value\":\"\",\"key_size\":1}"))
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

payload = "{\"retries\":0,\"challenge_type\":0,\"scep_configuration_name\":\"Sample\",\"key_usage\":0,\"retry_delay\":\"0\",\"subject\":\"CN=%serialnumber%\",\"seat_id\":\"%email%\",\"name\":\"Sample\",\"subject_altname_type\":0,\"subject_altname_value\":\"\",\"key_size\":1}"

headers = {
    'Content-Type': "application/json",
    'Accept': "application/json",
    'Authorization': " d92d4xxxxxxxxxxxxx15f52"
    }

conn.request("POST", "/api/v1/mdm/scep/servers/%7Bserver_id%7D/templates", payload, headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Content-Type", "application/json");
    headersMap.put("Accept", "application/json");

    data=Map();
    data.put("scep_configuration_name","value");
    data.put("challenge_type","1");
    data.put("key_usage","1");
    data.put("subject_altname_type","1");
    data.put("key_size","1");
    data.put("subject","value");
    data.put("name","value");
    data.put("nt_principal","value");
    data.put("challenge","value");
    data.put("subject_altname_value","value");
    data.put("retries","1");
    data.put("retry_delay","value");
    data.put("seat_id","value");
    data.put("domain","value");
    data.put("scep_admin_challenge_endpoint_url","value");
    data.put("scep_admin_challenge_username","value");
    data.put("scep_admin_challenge_password","value");
    data.put("redistribute_profiles",true);
    data_renewal_settings=Map();
    data.put("renewal_settings",data_renewal_settings);

    response = invokeUrl
    [
        url: "https://appDomain/api/v1/mdm/scep/servers/{server_id}/templates"
        type: POST
        headers: headersMap
        body: data
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Content-Type", "application/json")
$headers.Add("Accept", "application/json")
$headers.Add("Authorization", " d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/api/v1/mdm/scep/servers/%7Bserver_id%7D/templates' -Method POST -Headers $headers -ContentType 'application/json' -Body '{"retries":0,"challenge_type":0,"scep_configuration_name":"Sample","key_usage":0,"retry_delay":"0","subject":"CN=%serialnumber%","seat_id":"%email%","name":"Sample","subject_altname_type":0,"subject_altname_value":"","key_size":1}'

Sample Request Body

Add a new SCEP template with basic configuration

Copied!

  {
    "retries": 0,
    "challenge_type": 0,
    "scep_configuration_name": "Sample",
    "key_usage": 0,
    "retry_delay": "0",
    "subject": "CN=%serialnumber%",
    "seat_id": "%email%",
    "name": "Sample",
    "subject_altname_type": 0,
    "subject_altname_value": "",
    "key_size": 1
  }

▼ Show full

Response Parameters

- HTTP code 200

Response Body - application/json

JSON Object

Hide Sub-Attributes

scep_config_idstring

Unique identifier of the created SCEP template. Use this ID in SCEP payload requests (scep_config_id field)

scep_configuration_namestring

Display name of the SCEP template configuration

namestring

Friendly name of the SCEP template

challenge_typestring

Challenge type. 0=None, 1=Static, 2=Dynamic

is_challenge_pwd_configuredboolean

Whether a challenge password is configured for this template

key_usagestring

Key usage value

subjectstring

Certificate subject DN

subject_altname_typestring

Subject Alternative Name type

subject_altname_valuestring

Subject Alternative Name value

key_sizestring

Key size for the certificate

retriesstring

Number of retries for SCEP enrollment

retry_delaystring

Delay between retries in seconds

nt_principalstring

NT Principal name

seat_idstring

Seat ID variable

urlstring

SCEP server URL (inherited from the parent SCEP server)

ca_finger_printstring

CA certificate fingerprint (inherited from the parent SCEP server)

renewal_settingsJSON Object

Auto-renewal configuration

Show Sub-Attributes

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

SCEP template successfully created

Copied!

  {
    "nt_principal": "",
    "challenge_type": "0",
    "is_challenge_pwd_configured": false,
    "key_usage": "0",
    "subject": "CN=%serialnumber%",
    "seat_id": "%email%",
    "renewal_settings": {
      "auto_renew_enabled": false,
      "num_days": "-1"
    },
    "scep_config_id": "6967000000599729",
    "url": "http://10.51.79.112/certSrv/mscep/mscep.dll",
    "ca_finger_print": "bf54330f3132d590d3d7c3e86ebc8563b5ea976e",
    "retries": "0",
    "scep_configuration_name": "Sample",
    "retry_delay": "0",
    "name": "Sample",
    "subject_altname_type": "0",
    "subject_altname_value": "",
    "key_size": "1"
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.