The Simple Certificate Enrollment Protocol (SCEP) is used to request certificates for employees during endpoint provisioning. Employees initially connect via open service set identifier (SSID) and are then redirected to client provisioning. The employee endpoints obtain certificates, which are provisioned via SCEP, obtain a native supplicant, and obtain a Wi-Fi profile.
Employees connect initially using open service set identifier (SSID) until their endpoints are provisioned. Users who connect via the open SSID are sent to WebAuth. Guests always connect to network via open SSID. Open SSID is not the protocol used to request certificates for employees during endpoint provisioning.
Remote Authentication Dial-In User Service (RADIUS) is a standards-based network protocol that facilitates centralized authentication, authorization, and accounting (AAA) services. An access- accept packet sent by the RADIUS server to the client contains the appropriate authorization details for the connection. RADIUS is not the protocol used to request certificates for employees during endpoint provisioning.
The Change of Authorization (CoA) is a standards-based method to change an endpoint authorization status after successful authentication and after confirmation of endpoint compliance.
CoA is not the protocol used to request certificates for employees during endpoint provisioning.