Dell Hybrid Client version 2403 Administrator's Guide

Configure the SCEP settings using Wyse Management Suite

1. Log in to Wyse Management Suite.
2. Go to the Groups & Configs page, and select your preferred device policy group.
3. Click Edit Policies > Dell Hybrid Client 2.x.
   The Configuration Control | Dell Hybrid Client 2.x page is displayed.
4. Click the Advanced tab.
5. Expand Privacy & Security, and click SCEP.
6. Click the Enable SCEP toggle key.
7. To add a single certificate, click Add Row, and configure the following settings:
   1. In the Certificate Name field, specify the certificate name.
   2. Click the Enable Auto Renew toggle key.
   3. Set Select Auto Renew Time Frame to 100%.
   4. If the 802.1x authentication is enabled, you can select either User or Machine from the Authentication Mode drop-down list. Based on your selection, user or machine mode certificates are obtained from the SCEP server.
      NOTE:If you select the user mode authentication for AD User, the enrolled certificate is available only for that particular AD user.
   5. In the Sub Alt Name field, enter the subject alternative name.
   6. In the SCEP URL field, enter the complete URL path of the SCEP server.
   7. In the Challenge Password field, enter the Certificate Enrollment Challenge Password. You can obtain the challenge password from the SCEP server.
   NOTE:If you are adding SCEP from Wyse Management Suite, Yes is selected as the default value for the SCEP from WMS option. This selection cannot be changed by the administrator.

   NOTE:SCEP can be configured with the device serial number as SCEP certificate name. The special characters that can be used for these are $SN and $sn. These special characters can be used in 802 configuration also as SCEP certificate name.
8. To add multiple certificates, repeat step 7.
9. Click Save & Publish.