SCEP/NDES and MS Cloud PKI support

Project Discussion Desktop
1

Hello friends!
Is there a solution, or maybe it is planned for future releases, for managing and installing certificates?
I’m talking about support for SCEP/NDES and MS Cloud PKI.
The only information close to the topic can be found here:
https://learn.microsoft.com/en-us/archive/blogs/jeffbutte/linux-certificate-enrollment-and-automated-renewal-using-ndes-v2

Additionally, I want to note that Ubuntu has a built-in ADSys utility for such purposes, but this is only acceptable for on-premises AD.
I would like to have a similar one out of box tool that works with Entra ID and MS Intune.

2

We’ve been looking for different solutions about a year now. We ended up trying ADSys.
If your NDES setup support Kerberose, you can map users to authenticate to kerberose and use cepces to get the certificates.

3

Unfortunately, we use Entra ID only, no Hybrid join or on-premises AD.