diff --git a/platform/README.mdx b/platform/README.mdx index 79f3679c..bb4515d0 100644 --- a/platform/README.mdx +++ b/platform/README.mdx @@ -64,18 +64,12 @@ See:
- 💡 What about MDM’s that do not support Dynamic SCEP? -

- There are two main approaches to using SCEP as a certificate enrolment protocol: static and dynamic. -

-

- In static SCEP, a single challenge password is in every SCEP payload for every device. This practice is insecure and not recommended. Furthermore, it only shows a single user in reporting. We do not support this because we believe it's crucial to provide the most secure options for your infrastructure. -

-

- In contrast, for Dynamic SCEP, webhooks are used to generate new challenges and unique passwords for each device, and you would be able to see reporting for all devices. -

-

In such a case where your MDM does not support Dynamic SCEP, your next best bet to deploy Smallstep is to use the Smallstep Agent. See details below -

+

💡 What about MDM’s that do not support Dynamic SCEP?

+

There are two main approaches to using SCEP as a certificate enrollment protocol: static and dynamic.

+ +

In static SCEP, a single challenge password is in every SCEP payload for every device. This practice is insecure and not recommended. Furthermore, it only shows a single user in reporting. We do not support this because we believe it's crucial to provide the most secure options for your infrastructure.

+

In contrast, for Dynamic SCEP, webhooks are used to generate new challenges and unique passwords for each device, and you would be able to see reporting for all devices.

+

If your MDM does not support Dynamic SCEP, your next best bet to deploy Smallstep is to use the Smallstep Agent. See details below.