The chief information officer (CIO) of a major company intends to increase employee connectivity and productivity by issuing employees mobile devices with access
to their enterprise email, calendar, and contacts. The solution the CIO intends to use requires a PKI that automates the enrollment of mobile device certificates.
Which of the following, when implemented and configured securely, will meet the CIO’s requirement?
A.
OCSP
B.
SCEP
C.
SAML
D.
OSI
Organizations that use Simple Certificate Enrollment Protocol (SCEP) for mobile devices may have an increased security risk. Mobile devices that are issued digital certificates by SCEP may be susceptible to a Privilege Escalation Attack.
1
0