[Kul]

Just want to check, on the 'Manage SCEP Profile' the bit where is says 'Automatic Renewal' = xx days.

Are they referring to automatic renewal of the Certificate authority Identifier certificate used in the SCEP profile or do they mean user certificate renewal ?

[interactive]

Good question...

I deploy with a MS Enterprise CA "User Certificates" for VPN usage to our Blackberry Devices... But never the certificates will be do a Auto renewal.

I´m not shure, why. I use the SCEP Profile only attached to the VPN Profile on BES, no direct assignment to a Usergroup or something else.

User SCEP certificates Deployment within VPN Profile works fine.

Actually I delete every year the SCEP Parameter into my BES VPN Profile for a Weekend and tell the users they should´nt shutdown their devices a Weekend Long. After Weekend, if all users don´t shutdown her Blackberrys the user certificates was deleted and at monday I enable SCEP Paramter within VPN Profile again..

it´s a Manual Auto renewal Feature with BES 12.4
Maybe you found a solution, pls let me know

[freakinvibe]

The "Automatic Renewal" is referring to the certificate that gets pushed to the device. On the device, you can find it under

Settings > Security and Privacy > Certificates > My Certificates

For example, if you set that value to 60 it means that 60 days before the certificate expires, it will try to renew it automatically.

[interactive]

Do you try this function /feature and it will be work?

[Kul]

Just so that I understand, am I correct in saying that 60days before the 'User certificate' expires, it will auto-renew it ? and NOT the certificate authority identifier certificate (which has the thumbprint on the NDES enrollment service) - as its this cert which we use the thumbprint in teh SCEP policy that is expiring.

http://internal-CAServer/CertSrv/mscep_admin/