---
title: "PUT /api/v1/cert-manager/applications/{applicationId}/profiles/{profileId}/enrollment/scep"
method: PUT
path: "/api/v1/cert-manager/applications/{applicationId}/profiles/{profileId}/enrollment/scep"
tags: ["PKI Applications"]
---

# PUT /api/v1/cert-manager/applications/{applicationId}/profiles/{profileId}/enrollment/scep

`PUT /api/v1/cert-manager/applications/{applicationId}/profiles/{profileId}/enrollment/scep`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/cert-manager/applications/{applicationId}/profiles/{profileId}/enrollment/scep`
- Auth: none declared

Enable or update the SCEP enrollment method for a profile on an application.

## Path parameters

- `applicationId` string, uuid, required
- `profileId` string, uuid, required

## Request body

- object
  - `challengeType` 'static' | 'dynamic' | 'microsoft-intune'
  - `challengePassword` string
  - `includeCaCertInResponse` boolean
  - `allowCertBasedRenewal` boolean
  - `dynamicChallengeExpiryMinutes` integer
  - `dynamicChallengeMaxPending` integer
  - `validationConnectionId` string, uuid
  - `signRaWithCa` boolean

## Response `200`

Default Response

- object
  - `applicationId` string, uuid, required
  - `profileId` string, uuid, required
  - `scep` object, required
    - `id` string, uuid, required
    - `challengeType` 'static' | 'dynamic' | 'microsoft-intune', required

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-07-31** `edde28ab3c8c`: 1 warning, 4 info
  - added the new `microsoft-intune` enum value to the `scep/challengeType` response property for the response status `200`
  - added the new optional request property `signRaWithCa`
  - added the new optional request property `validationConnectionId`
  - the `allowCertBasedRenewal` request property default value `true` was removed
  - …1 more

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/cert-manager/applications/:applicationId/profiles/:profileId/enrollment/scep/put.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)