[{"data":1,"prerenderedAt":409},["ShallowReactive",2],{"sc:header-data-en":3,"sc:footer-data-en":102,"post-en--posts-microsoft-cloud-pki-manually-issuing-certificates-121a4176c48965":131,"authors_data:SCEPman Team":300,"content-en-list-7b291c2dd91a4":306},{"lang":4,"home":5,"navigation":14,"contact":95},"en",{"name":6,"imgLight":7,"img":8,"languages":9},"home","/products/scepman/scepman-logo-all-white.svg","/products/scepman/scepman-logo-rgb.svg",{"en":10},{"title":11,"url":12,"alt":13},"Home","/en","SCEPman",[15,19,25,31,83,89],{"name":16,"languages":17},"nav-home",{"en":18},{"title":11,"url":12},{"name":20,"languages":21},"pricing",{"en":22},{"title":23,"url":24},"Pricing","/en/pricing",{"name":26,"languages":27},"partner",{"en":28},{"title":29,"url":30},"Partner","/en/partner",{"name":32,"languages":33,"children":36},"support-hub",{"en":34},{"title":35},"Support Hub",[37,53,68],{"name":38,"children":39},"support-hub-group-1",[40,47],{"name":41,"target":42,"languages":43},"docs","_blank",{"en":44},{"title":45,"url":46},"Docs","https://docs.scepman.com/",{"name":48,"languages":49},"faq",{"en":50},{"title":51,"url":52},"FAQ","/en/faq",{"name":54,"children":55},"support-hub-group-2",[56,62],{"name":57,"target":42,"languages":58},"support-ticket",{"en":59},{"title":60,"url":61},"Support Ticket","https://support.scepman.com/support/tickets/new?ticket_form=technical_support_request_%28scepman%29",{"name":63,"target":42,"languages":64},"drop-a-question",{"en":65},{"title":66,"url":67},"Drop a Question","https://support.scepman.com/support/tickets/new?ticket_form=drop_a_question_%28scepman%29",{"name":69,"children":70},"support-hub-group-3",[71,77],{"name":72,"languages":73},"glossary",{"en":74},{"title":75,"url":76},"Glossary","/en/glossary",{"name":78,"languages":79},"blog",{"en":80},{"title":81,"url":82},"Blog","/en/blog",{"name":84,"languages":85},"events",{"en":86},{"title":87,"url":88},"Events","/en/events",{"name":90,"languages":91},"about",{"en":92},{"title":93,"url":94},"About us","/en/about-us",{"name":96,"languages":97},"contact",{"en":98},{"title":99,"url":100,"active":101},"support@scepman.com","mailto:support@scepman.com",false,{"data":103},{"mail":104,"logos":105,"socials":110,"links":123},"sales@SCEPman.com",[106],{"img":107,"alt":108,"url":109},"/products/scepman/scepman-logo-yellow.svg","SCEPman Logo","/",[111,115,119],{"icon":112,"url":113,"title":114},"fa-x-twitter","https://twitter.com/scepman_","X",{"icon":116,"url":117,"title":118},"fa-youtube","https://www.youtube.com/channel/UCKnLYxlQFhzdXkDADV_Unrg","Youtube",{"icon":120,"url":121,"title":122},"fa-linkedin","https://www.linkedin.com/showcase/scepman","LinkedIn",[124,127,129],{"title":125,"url":126},"Privacy","/enundefined",{"title":128,"url":126},"Imprint",{"title":130,"url":126},"Contact & Locations",{"id":132,"title":133,"author":134,"body":136,"cta":279,"description":269,"eventid":279,"extension":280,"hideInRecent":101,"layout":281,"meta":282,"moment":284,"navigation":291,"path":292,"seo":293,"stem":294,"tags":295,"webcast":101,"__hash__":299},"content_en/posts/microsoft-cloud-pki-manually-issuing-certificates.md","Manually Issuing Certificates with Microsoft Cloud PKI: Your Alternatives and Solutions",[135],"SCEPman Team",{"type":137,"value":138,"toc":268},"minimal",[139,144,148,171,174,178,183,188,220,224,251,255],[140,141,143],"h2",{"id":142},"the-gap-in-microsoft-cloud-pki","The Gap in Microsoft Cloud PKI",[145,146,147],"p",{},"While Microsoft Cloud PKI excels at automating certificate issuance for Windows endpoints through Intune, it lacks key features for organizations needing manual control. Missing capabilities include:",[149,150,151,159,165],"ul",{},[152,153,154,158],"li",{},[155,156,157],"strong",{},"Manual certificate issuance"," for unique use cases like server TLS/SSL, code signing, or non-Intune-managed devices.",[152,160,161,164],{},[155,162,163],{},"Flexibility"," to issue certificates for custom configurations, legacy systems, or ad-hoc requests.",[152,166,167,170],{},[155,168,169],{},"Support for diverse environments",", including cross-platform needs or offline devices.",[145,172,173],{},"These limitations make it challenging for organizations to handle non-standard certificate requirements effectively.",[140,175,177],{"id":176},"a-companion-to-microsoft-cloud-pki-scepman","A Companion to Microsoft Cloud PKI: SCEPman",[145,179,180,182],{},[155,181,13],{}," is the Azure-native, fully managed certificate authority that fills the gaps left by Microsoft Cloud PKI. It offers the flexibility and control you need to manually issue certificates for a wide range of scenarios.",[184,185,187],"h3",{"id":186},"key-features","Key Features:",[149,189,190,196,202,208,214],{},[152,191,192,195],{},[155,193,194],{},"Manual Certificate Issuance",": Easily issue certificates for servers, code signing, smart cards, or ad-hoc requests through a user-friendly web interface or REST API.",[152,197,198,201],{},[155,199,200],{},"Custom Configurations",": Tailor certificates to meet specific needs, including extended key usages (EKUs) for unique applications.",[152,203,204,207],{},[155,205,206],{},"Cross-Platform Support",": Issue certificates for Windows, Linux, macOS, IoT devices, and more.",[152,209,210,213],{},[155,211,212],{},"Azure-Native Deployment",": Fully hosted in your Azure tenant, ensuring data sovereignty and compliance.",[152,215,216,219],{},[155,217,218],{},"Comprehensive Management",": Revoke, renew, or audit certificates as needed with centralized control.",[140,221,223],{"id":222},"why-choose-scepman","Why Choose SCEPman?",[225,226,227,233,239,245],"ol",{},[152,228,229,232],{},[155,230,231],{},"Flexible Issuance",": Handle special cases and one-off requests with ease.",[152,234,235,238],{},[155,236,237],{},"User-Friendly Tools",": Manage certificates via a web interface or automate processes using REST APIs.",[152,240,241,244],{},[155,242,243],{},"Seamless Integration",": Works alongside your existing Azure environment and complements Microsoft Cloud PKI.",[152,246,247,250],{},[155,248,249],{},"Cost-Effective Solution",": Avoid building a complex on-premises PKI for ad-hoc certificate needs.",[140,252,254],{"id":253},"get-started-with-scepman","Get Started with SCEPman",[145,256,257,258,260,261],{},"Your perfect companion to Microsoft Cloud PKI, ",[155,259,13],{}," ensures your organization has the tools it needs to secure every device, server, and endpoint. ",[262,263,267],"a",{"href":264,"rel":265},"https://support.scepman.com/support/tickets/new?ticket_form=trial_request_%28scepman%29",[266],"nofollow","Get your 30-day SCEPman trial now!",{"title":269,"searchDepth":270,"depth":270,"links":271},"",2,[272,273,277,278],{"id":142,"depth":270,"text":143},{"id":176,"depth":270,"text":177,"children":274},[275],{"id":186,"depth":276,"text":187},3,{"id":222,"depth":270,"text":223},{"id":253,"depth":270,"text":254},null,"md","post",{"lang":4,"seoTitle":133,"titleClass":283,"date":284,"categories":285,"blogtitlepic":286,"socialimg":287,"customExcerpt":288,"keywords":289,"footer":290},"h2-font-size","2026-03-25",[13],"header-scepman-manual-certificates.png","/blog/heads/header-scepman-manual-certificates.png","Do you need to manually issue certificates for specific scenarios, such as securing web servers, signing code, or other use cases? Unfortunately, Microsoft Cloud PKI does not support manual certificate issuance. By design, it only supports Intune managed devices.","Microsoft Cloud PKI, Manually Issued Certificates, Microsoft Intune",{"noMargin":291},true,"/posts/microsoft-cloud-pki-manually-issuing-certificates",{"title":133,"description":269},"posts/microsoft-cloud-pki-manually-issuing-certificates",[296,297,298],"Microsoft Cloud PKI","Manually Issued Certificates","Microsoft Intune","HsdnAX-7fch3MKei-cXF0-4YWcnW-Cq8anSIDU3jeXM",{"id":301,"extension":302,"meta":303,"stem":304,"__hash__":305},"authors_data/authors.json","json",{},"authors","PIJJchcHqfzD5YPmn4V8YLxY6gtySOfBG5u8lTczi2w",{"list":307,"authors":408},[308,327,343,355,367,379,384,396],{"id":309,"title":310,"author":311,"cta":279,"description":313,"hideInRecent":101,"layout":281,"meta":314,"moment":315,"path":319,"stem":320,"tags":321,"webcast":101},"content_en/posts/private-ca-vs-public-ca.md","Private vs Public CAs: You Might Be Using the Wrong One",[312],"Kevin Vo","To an IT team under pressure, a public Certificate Authority (CA) often looks like a hammer, and every encryption requirement looks like a nail. But using a public CA for every job is one of the most common ways to quietly break production.",{"lang":4,"date":315,"categories":316,"blogtitlepic":317,"customExcerpt":318},"2026-08-24",[13],"header-scepman-private-vs-public-ca.png","Public CA certificates lose client authentication support by March 2027. See when a private CA is required, and how SCEPman automates issuance.","/posts/private-ca-vs-public-ca","posts/private-ca-vs-public-ca",[322,323,324,325,326],"Private CA","Public CA","PKI","Client Authentication","Certificate Authority",{"id":328,"title":329,"author":330,"cta":279,"description":331,"hideInRecent":101,"layout":281,"meta":332,"moment":333,"path":337,"stem":338,"tags":339,"webcast":101},"content_en/posts/adcs-alternatives.md","Microsoft ADCS Alternatives in 2026",[135],"Microsoft Active Directory Certificate Services — also known as ADCS, ADCA, or Microsoft CA — has been the default PKI for Windows environments for years. Many organizations still rely on it for certificate issuance across users, devices, and servers.",{"lang":4,"date":333,"categories":334,"blogtitlepic":335,"customExcerpt":336},"2026-05-01",[13],"header-scepman-adcs-alternatives.png","Looking for ADCS, ADCA, or Microsoft CA alternatives? Active Directory Certificate Services adds complexity modern environments don't need. Here's what to look for in a replacement.","/posts/adcs-alternatives","posts/adcs-alternatives",[340,341,324,342],"ADCS","Alternatives","Active Directory Certificate Services",{"id":344,"title":345,"author":346,"cta":279,"description":347,"hideInRecent":101,"layout":281,"meta":348,"moment":333,"path":352,"stem":353,"tags":354,"webcast":101},"content_en/posts/microsoft-cloud-pki-alternatives.md","Microsoft Cloud PKI Alternatives in 2026",[135],"Microsoft Cloud PKI is designed for issuing certificates to Intune-managed devices. It works well for mobile and endpoint management in Microsoft-centric environments.",{"lang":4,"date":333,"categories":349,"blogtitlepic":350,"customExcerpt":351},[13],"header-scepman-cloud-pki-alternatives.png","Looking for Microsoft Cloud PKI alternatives? Cloud PKI only covers Intune-managed devices — no Linux, no servers, no IoT. Here's where it falls short and what to look for in a replacement.","/posts/microsoft-cloud-pki-alternatives","posts/microsoft-cloud-pki-alternatives",[296,341,298,324],{"id":356,"title":357,"author":358,"cta":279,"description":269,"hideInRecent":101,"layout":281,"meta":359,"moment":284,"path":363,"stem":364,"tags":365,"webcast":101},"content_en/posts/microsoft-cloud-pki-iot-certificates.md","Creating IoT Certificates with Microsoft Cloud PKI: Your Alternatives and Solutions",[135],{"lang":4,"date":284,"categories":360,"blogtitlepic":361,"customExcerpt":362},[13],"header-scepman-iot-certificates.png","Are you looking for a way to create and manage certificates for IoT devices using Microsoft Cloud PKI? Unfortunately, Microsoft Cloud PKI does not support IoT certificates. By design it only supports Intune managed devices.","/posts/microsoft-cloud-pki-iot-certificates","posts/microsoft-cloud-pki-iot-certificates",[296,366,298],"IoT Certificates",{"id":368,"title":369,"author":370,"cta":279,"description":269,"hideInRecent":101,"layout":281,"meta":371,"moment":284,"path":375,"stem":376,"tags":377,"webcast":101},"content_en/posts/microsoft-cloud-pki-linux-certificates.md","Creating Linux Endpoint Certificates with Microsoft Cloud PKI: Your Alternatives and Solutions",[135],{"lang":4,"date":284,"categories":372,"blogtitlepic":373,"customExcerpt":374},[13],"header-scepman-linux-endpoint-certificates.png","Are you searching for a solution to create and manage certificates for Linux endpoints with Microsoft Cloud PKI? Unfortunately, Microsoft Cloud PKI does not support Linux endpoint certificates.","/posts/microsoft-cloud-pki-linux-certificates","posts/microsoft-cloud-pki-linux-certificates",[296,378,298],"Linux Endpoint Certificates",{"id":132,"title":133,"author":380,"cta":279,"description":269,"hideInRecent":101,"layout":281,"meta":381,"moment":284,"path":292,"stem":294,"tags":383,"webcast":101},[135],{"lang":4,"date":284,"categories":382,"blogtitlepic":286,"customExcerpt":288},[13],[296,297,298],{"id":385,"title":386,"author":387,"cta":279,"description":269,"hideInRecent":101,"layout":281,"meta":388,"moment":284,"path":392,"stem":393,"tags":394,"webcast":101},"content_en/posts/microsoft-cloud-pki-network-device-certificates.md","Creating Certificates for Network Devices with Microsoft Cloud PKI: Your Alternatives and Solutions",[135],{"lang":4,"date":284,"categories":389,"blogtitlepic":390,"customExcerpt":391},[13],"header-scepman-certificates-network-devices.png","Are you searching for a solution to create and manage certificates for network devices with Microsoft Cloud PKI? Unfortunately, Microsoft Cloud PKI does not support network devices certificates. By design it only supports Intune managed devices, only.","/posts/microsoft-cloud-pki-network-device-certificates","posts/microsoft-cloud-pki-network-device-certificates",[296,395,298],"Network Device Certificates",{"id":397,"title":398,"author":399,"cta":279,"description":269,"hideInRecent":101,"layout":281,"meta":400,"moment":284,"path":404,"stem":405,"tags":406,"webcast":101},"content_en/posts/microsoft-cloud-pki-server-certificates.md","Creating Server Certificates with Microsoft Cloud PKI: Alternatives and Solutions",[135],{"lang":4,"date":284,"categories":401,"blogtitlepic":402,"customExcerpt":403},[13],"header-scepman-server-certificates.png","Are you looking for a way to create server certificates using Microsoft Cloud PKI? Many organizations rely on Microsoft's PKI solutions for certificate management, but there’s a significant limitation: Microsoft Cloud PKI does not support server certificates. By design it only supports Intune managed devices, only.","/posts/microsoft-cloud-pki-server-certificates","posts/microsoft-cloud-pki-server-certificates",[296,407,298],"Server Certificates",{},1790429701959]