Map Entrust Certificate Authority certificate definition policies to the certificate types added in Adding certificate types to Entrust Certificate Authority for SCEP and Intune-SCEP enrollment.

Mapping to the SCEP Encryption certificate type

See below to map an Entrust Certificate Authority certificate definition policy to the SCEP Encryption certificate type.

To map a certificate definition policy to the SCEP Encryption certificate type

  1. Log in to Entrust Certificate Authority Administration.
  2. In the tree view, expand Security Policy > Certificate Categories > Enterprise > SCEP Encryption > Encryption_p10.
  3. In the Certificate definition Policy drop-down list, select Encryption_P10 policy.
  4. Click Apply.
  5. If prompted, authorize the operation.

Mapping to the SCEP Signing certificate type

See below to map an Entrust Certificate Authority certificate definition policy to the SCEP Signing certificate type.

To map a certificate definition policy to the SCEP Signing certificate type

  1. Log in to Entrust Certificate Authority Administration.
  2. In the tree view, expand Security Policy > Certificate Categories > Enterprise > SCEP Signing > Verification_p10.
  3. In the Certificate definition Policy drop-down list, select Verification_p10 Policy.
  4. Click Apply.
  5. If prompted, authorize the operation.

Mapping to the SCEP Signing and Encryption certificate type

See below to map an Entrust Certificate Authority certificate definition policy to the SCEP Signing and Encryption certificate type.

To map a certificate definition policy to the SCEP Signing and Encryption certificate type

  1. Log in to Entrust Certificate Authority Administration.
  2. In the tree view, expand Security Policy > Certificate Categories > Enterprise > SCEP Signing and Encryption > Dual Usage.
  3. In the Certificate definition Policy drop-down list, select Dual Usage Policy.
  4. Click Apply.
  5. If prompted, authorize the operation.

Mapping to the SCEP Signing and Nonrepudation certificate type

See below to map an Entrust Certificate Authority certificate definition policy to the SCEP Signing and Nonrepudation certificate type.

To map a certificate definition policy to the SCEP Signing and Nonrepudation certificate type

  1. Log in to Entrust Certificate Authority Administration.
  2. In the tree view, expand Security Policy > Certificate Categories > Enterprise > SCEP Signing and Nonrepudiation > Nonrepudiation.
  3. In the Certificate definition Policy drop-down list, select Nonrepudiation Policy.
  4. Click Apply.
  5. If prompted, authorize the operation.