Install SCEP Relay Service

The SCEP relay service interfaces directly with the InTune MDM. 

Warning: The SCEP relay is a public service. Proper security controls should be placed to ensure that only the Microsoft Intune and the customer premise networks can access the Scep Relay Service.

Install IIS/ASP.Net

The Web.config will need the following requestLImits to enable the larger scep requests to come through

<requestFiltering>
<!-- 1 GB -->
<requestLimits maxAllowedContentLength="1073741824" maxUrl="10999" maxQueryString="2097151" />
</requestFiltering>

and

Step Number	Procedure	Example
1	Open Server Manager.
2	Click add roles and features.
3	Click Next.
4	Select Role-based or feature-based installation and click Next.
5	Select the server ( maintain defaults ) . Click Next.
6	Scroll down and select Web Server. Next click Add Features.
7	Click Next.
8	Verify .net 3.5 and .net 4.5 features are installed and click Next.
9	Click Next.
10	Next, select the role services. Verify each of the selections have been made.
11	After verifying selections have been made, press Next.
12	Press Install.
13	Installation will proceed.
14	Press Close to complete the process.
15	Next, open the IIS manager, and verify the installation occurred.
16	IIS Install is complete.

 Run the ScepRelay Installer

 Create the Scep Relay WebSite

Step Number	Step	Description
1	In IIS, right click on sites and add Web Site
2	Site Name: ScepRelayService Physical Path: C:\Program Files (x86)\CyberArmed\ScepRelayService Binding: HTTPS
3	Press OK

Validate the Scep Relay Install

Click on the SCEP Relay Site, press Browse for http

Open a web browser, go to: https://localhost:999/api/getversion

To see the number of connections: https://localhost:999/api/getConnectedClients