To test SCEP enrollment with ChromeOS:

  1. Enroll a Chromebook into Google Admin using the Enterprise Enrollment option.
  2. Log in to the Chromebook.
  3. Open Google Chrome.
  4. Browse to chrome://policy.
  5. Ensure that a device or user policy for client certificates exists (either RequiredClientCertificateForDevice or RequiredClientCertificateForUser).
    • The RequiredClientCertificateForDevice policy corresponds to the Chromebook (device) device platform in the SCEP profile.
    • The RequiredClientCertificateForUser policy corresponds to the Chromebook (user) device platform in the SCEP profile.
  6. Browse to chrome://certificate-manager.
  7. The name of the SCEP certificate should appear in the list.
  8. Click on the SCEP certificate to view details.
  9. Validate that no errors are displayed for the certificate.