# Add a new SCEP payload configuration to an existing profile

Create Windows SCEP policy payload

## Endpoints

**POST** `/api/v1/mdm/profiles/{profile_id}/payloads/windowssceppolicy`

## Request URL

`https://{server-hostname}:8383/api/v1/mdm/profiles/{profile_id}/payloads/windowssceppolicy`

## Scope

`MDMDeviceMgmt.CREATE`

## Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Request Headers

- **Content-Type** (`string`, Mandatory): `application/json`
- **Accept** (`string`, Mandatory): `application/json`

### Path Parameters

- **profile_id** (`string`, Mandatory): Unique identifier of the profile. Obtain from the [Create Profile](https://www.manageengine.com/products/desktop-central/help/api/onpremise/mdm-profiles-create-profile.html) or [Get Profiles](https://www.manageengine.com/products/desktop-central/help/api/onpremise/mdm-profiles-get-profile.html) response.

### Request Body

`application/json`

- **scep_config_id** (`long`, Mandatory): SCEP template configuration ID. First create a SCEP server using [Add SCEP Server](https://www.manageengine.com/products/desktop-central/help/api/onpremise/certificates-add-scep-server.html), then create a template using [Add SCEP Template](https://www.manageengine.com/products/desktop-central/help/api/onpremise/certificates-add-scep-template.html) to obtain this ID.
- **windows_scep_scope** (`integer`, Optional): Windows Scep Scope. Default: 1
- **windows_ksp_location** (`integer`, Optional): Windows Ksp Location. Default: 2

## Sample Request

```curl
curl --request POST \
  --url https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/windowssceppolicy \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52' \
  --header 'Content-Type: application/json' \
  --data '{"scep_config_id":1,"windows_scep_scope":1,"windows_ksp_location":2}'
```

## Sample Request Body

Add SCEP payload to the profile

```json
{
  "scep_config_id": 1,
  "windows_scep_scope": 1,
  "windows_ksp_location": 2
}
```

## Response Parameters

### HTTP Code 200

Response Body — `application/json`

- **payload_id** (`long`): Unique identifier for the created payload item.
- **scep_config_id** (`string`): SCEP template configuration ID. First create a SCEP server using [Add SCEP Server](https://www.manageengine.com/products/desktop-central/help/api/onpremise/certificates-add-scep-server.html), then create a template using [Add SCEP Template](https://www.manageengine.com/products/desktop-central/help/api/onpremise/certificates-add-scep-template.html) to obtain this ID.
- **windows_scep_scope** (`integer`): Windows Scep Scope. Default: 1
- **windows_ksp_location** (`integer`): Windows Ksp Location. Default: 2

## Possible Response Codes

- **200** (`HTTP code`)

## Sample Response: HTTP 200

SCEP payload successfully added

```json
{
  "payload_id": 9007199254741296,
  "scep_config_id": 1,
  "windows_scep_scope": 1,
  "windows_ksp_location": 2
}
```

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.