# SCEP The payload that configures Simple Certificate Enrollment Protocol (SCEP) settings. ``` object SCEP ``` ## Discussion Specify `com.apple.security.scep` as the payload type. A SCEP payload automates the request of a client certificate from a SCEP server, as described in [Over-the-Air Profile Delivery and Configuration](https://developer.apple.com/library/archive/documentation/NetworkingInternet/Conceptual/iPhoneOTAConfiguration/Introduction/Introduction.html). ### Profile availability ||| |--------------------------|------------------------------------------------| |Device channel |iOS, macOS, Shared iPad, tvOS, visionOS, watchOS| |User channel |macOS | |Allow manual install |iOS, macOS, tvOS, visionOS, watchOS | |Requires supervision |N/A | |Requires user-approved MDM|N/A | |Allowed in user enrollment|iOS, macOS, visionOS | |Allow multiple payloads |iOS, macOS, Shared iPad, tvOS, visionOS, watchOS| ### Profile example ```plist PayloadContent PayloadContent Challenge Example Key Type RSA Key Usage 5 Keysize 0 Name example.org Subject C US O Example Inc. CN foo 1.2.5.3 bar SubjectAltName dNSName example.com ntPrincipalName hostname.example.com URL https://hostname.example.com/ PayloadIdentifier com.example.myscepcertpayload PayloadType com.apple.security.scep PayloadUUID c0264fd7-1d89-4385-8806-759fbe78a622 PayloadVersion 1 PayloadDisplayName SCEP Certificate PayloadIdentifier com.example.myprofile PayloadType Configuration PayloadUUID bc0328a9-c199-4572-9e5e-ed59a73454fa PayloadVersion 1 ``` ## Topics ### Objects [`SCEP.PayloadContent`](/documentation/DeviceManagement/SCEP/PayloadContent-data.dictionary) The SCEP dictionary. --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)