Good question...
I deploy with a MS Enterprise CA "User Certificates" for VPN usage to our Blackberry Devices... But never the certificates will be do a Auto renewal.
Iīm not shure, why. I use the SCEP Profile only attached to the VPN Profile on BES, no direct assignment to a Usergroup or something else.
User SCEP certificates Deployment within VPN Profile works fine.
Actually I delete every year the SCEP Parameter into my BES VPN Profile for a Weekend and tell the users they shouldīnt shutdown their devices a Weekend Long. After Weekend, if all users donīt shutdown her Blackberrys the user certificates was deleted and at monday I enable SCEP Paramter within VPN Profile again..
itīs a Manual Auto renewal Feature with BES 12.4
Maybe you found a solution, pls let me know
