This section will guide you through configuring a Windows Server hosting the Network Device Enrollment Service (NDES) role. This will be used to deliver SCEP certificates to devices.

 

After configuring NDES, you'll see how to deploy a certificate to a Mac computer using Kandji.

 

**This section will be required if you are planning on proceeding with the Let’s Build parts below.

Part 11 - Microsoft Entra Application Proxy - NDES/SCEP

Part 19 - Create a Windows NPS Server for WPA2 Enterprise TLS/EAP