Install SCEP on Macbook using Workspace one UEM
Add Certificate Authority and Template
If you are configuring SCEP certificates for both Windows and macOS, you only need to follow the initial setup documentation once.
- Please refer the Initial Setup documentation to add certificate authority and certificate template in Workspace one.
Add Profile for Macbook
- Go to Resources > Profiles and Baselines > Profiles and click Add > Add Profile
![Add Profile](https://files.readme.io/4a9bdbf-Screenshot_2024-05-15_at_10.18.59_AM.png)
Add Profile
- Select macOS > Device Profile.
![Add macOS profile](https://files.readme.io/05fe70d-Screenshot_2024-05-15_at_10.21.51_AM.png)
Add macOS profile
- Give a name to your profile.
- Search for 'SCEP' in the search box.
- Configure SCEP payload as below:
- Credential Source: Defined Certificate Authority
- Certificate Authority: Select CA configured earlier from the dropdown.
- Certificate Template: Select template configured earlier from the dropdown.
![Add SCEP payload](https://files.readme.io/2bb707a-Screenshot_2024-05-15_at_10.28.34_AM.png)
Add SCEP payload
- Now, to configure 'Credentials' payload you need active serve CA from Foxpass.
- Open 'Foxpass EAP-TLS page'in another tab and download active server CA.
![Download active server CA](https://files.readme.io/5c8bf1a-Screenshot_2024-05-15_at_10.42.19_AM.png)
Download active server CA
- Go back to Workspace one console. Search for 'Credentials'.
- Enter details as below:
- Credential Source: Upload
- Certificate: Choose downloaded server CA and click Attach.
![Configure 'Credentials' payload](https://files.readme.io/8819bb9-Screenshot_2024-05-15_at_10.49.58_AM.png)
Configure 'Credentials' payload
- Configure 'Network' payload. Search for 'Network'.
- Network Interface: Wi-Fi
- Service Set Identifier: Foxpass
- Security Type: WPA/WPA2 Enterprise
- Protocols: EAP-TLS
- Identity certificate: Choose 'SCEP' from the dropdown.
- Trusted Certificates: Credentials
- Click 'Next'
- Assign Smart Groups according to your needs.
- Click 'SAVE AND PUBLISH'.
![](https://files.readme.io/7372d27-Screenshot_2024-05-15_at_12.25.10_PM.png)
![Configure Network payload](https://files.readme.io/c62e540-Screenshot_2024-05-15_at_12.29.42_PM.png)
Configure Network payload
Enroll Macbook to Workspace one
- Make a note of the console version by clicking About of your Workspace one's console page.
![](https://files.readme.io/a1c088b-Screenshot_2024-05-15_at_11.29.39_AM.png)
- Go to resources.worskspaceone.com.
- Download the appropriate intelligent hub according to the console version on your Macbook.
![Download intelligent hub on macbook](https://files.readme.io/21e67c8-Screenshot_2024-05-15_at_11.25.18_AM.png)
Download intelligent hub on macbook
- Follow the setup wizard and install hub.
- Intelligent hub will open. Now enter your server address. Click 'Next'. Note : The server address in the screenshot is just an example, the server address and Group ID was sent to your email by Workspace ONE upon your registration of the user.
![Sample server address](https://files.readme.io/9a5092e-Screenshot_2024-05-15_at_11.43.39_AM.png)
Sample server address
- Enter your Group ID and click 'Next'.
![Enter Group ID](https://files.readme.io/fd316ed-Screenshot_2024-05-15_at_11.49.33_AM.png)
Enter Group ID
![](https://files.readme.io/dd36e60-Screenshot_2024-05-15_at_11.50.44_AM.png)
![](https://files.readme.io/87fb68e-Screenshot_2024-05-15_at_11.51.02_AM.png)
![Choose ownership according to your settings](https://files.readme.io/376f3a7-Screenshot_2024-05-15_at_11.51.09_AM.png)
Choose ownership according to your settings
![](https://files.readme.io/27440f3-Screenshot_2024-05-15_at_11.51.18_AM.png)
![](https://files.readme.io/e91c7c7-Screenshot_2024-05-15_at_11.51.27_AM.png)
![](https://files.readme.io/940a263-Screenshot_2024-05-15_at_11.51.48_AM.png)
![](https://files.readme.io/5accdc5-Screenshot_2024-05-15_at_11.52.00_AM.png)
![](https://files.readme.io/28352f1-Screenshot_2024-05-15_at_11.52.24_AM.png)
![](https://files.readme.io/67f0fa1-Screenshot_2024-05-15_at_12.03.35_PM.png)
- You can see successful/unsuccessful RADIUS logs on the RADIUS logs page.
![RADIUS logs](https://files.readme.io/2d9bcc7-Screenshot_2024-05-15_at_12.37.40_PM.png)
RADIUS logs
- If there are no SCEP errors, 'No errors' will be displayed in green color under Last error column for the respective endpoint on the SCEP page.
![SCEP page](https://files.readme.io/7e9e790-Screenshot_2024-05-15_at_12.50.48_PM.png)
SCEP page
If there are any SCEP errors, it would be shown under the 'Last error' column for the respective endpoint on the Foxpass SCEP page.
Updated 3 months ago