Question: what is ndes and scep?
Answer: NDES is a function of Active Directory Certificate Services (AD CS) and is based on the Simple Certificate Enrollment Protocol (SCEP), which can enroll devices without other AD domain credentials to use version 3 of X. 509 certificates from a certification authority (CA), usually a dedicated CA server.