This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 45%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBM%3C/text%3E%3C/svg%3E)
In this article
https://learn.microsoft.com/en-us/mem/intune/protect/certificates-profile-scep
there is the following statement:
Storage of certificates provisioned by SCEP:
Why is that? How can one place the SCEP certificate in the user keychain aka login keychain.
If a user specific certificate is stored in the system keychain any other other of the device could use that certificate and thus use a false identity.
There are other MDM tools which are able to place a SCEP certificate either in the system or the login keychain.
@Behrmann, Martin Thanks for posting in our Q&A.
For this issue, it seems by design. I have done a lot of research and I didn't find a method that can save SCEP certificate in the user keychain. To get more help, it is suggested to create an online support ticket. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-support
Thanks for your understanding.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 53%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELO%3C/text%3E%3C/svg%3E)
hi ,
I met the same issue , but it possible to Allow all apps access to private key in scep profil . This parameters permit to passthrought request access to system key chain when you launch vpn apps ...
regards Olivier
Would it be possible to prevent user X to use user Y's certificate which is stored in the system keychain?
Would it be possible this way to prevent user X to use user Y's certificate in the system keychain?
sorry , I don't know how if it's possible.