#MAC OS ACTIVE DIRECTORY MAC#
Configuration profiles were just coming to the Mac and the SCEP profile was include as one of the profiles available on the Mac. There was an add-on to the MSCA for SCEP (named NDES ), but it was limited as NDES was generally used for routers / fixed devices renewing certificates. Most large organizations, however, didn’t issue digital certificates via SCEP, they used the Microsoft Certificate Authority (MSCA) service in Windows Server. The iPhone had really taken off, and there was a big push to use SCEP to get certificates for WiFi and other services that required digital certificates. I worked at Apple in 2011 with enterprise customers to help them integrate Macs into their environments. How the AD Certificate Profile got into macOS when I was at Apple and a new open source project called tcscertrequest If you think you might be interested in using this tool, ping me on twitter the macadmins slack channel #twocanoes-certrequest, or send us an message via our contact form on Twocanoes. The history of the project is interesting, but if you just want to learn about the tool, skip down to The tcsertrequest Command Line Tool section below.
![mac os active directory mac os active directory](https://image.slidesharecdn.com/bestpracticeshowtointegratingmacosxwithactivedirectorytechnicalwhitepaper-140610010047-phpapp02/85/mac-os-x-active-directory-best-practices-how-to-integrating-mac-os-x-with-active-directory-technical-white-paper-1-320.jpg)
The request is sent the same way it would be sent from a Windows computer so no modifications to the Windows infrastructure is required to work with the Mac. I have created a macOS command line tool called “tcscertrequest” that submits requests to a Microsoft Certificate Authority from the macOS command line. Updates How the AD Certificate Profile got into macOS when I was at Apple