Network Device Enrollment Service
E724317
Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
All labels observed (1)
| Label | Occurrences |
|---|---|
| Network Device Enrollment Service canonical | 2 |
How this entity was disambiguated
This entity first appeared as the object of triple T8288915 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Network Device Enrollment Service Context triple: [Active Directory Certificate Services, integratesWith, Network Device Enrollment Service]
-
A.
Device Provisioning Protocol
Device Provisioning Protocol is a Wi‑Fi Alliance standard that securely bootstraps and configures devices onto wireless networks using modern cryptographic methods, often as a successor to WPS.
-
B.
Apple Automated Device Enrollment
Apple Automated Device Enrollment is an Apple device management feature that lets organizations automatically enroll and configure iOS, iPadOS, and macOS devices in their mobile device management (MDM) system during initial setup.
-
C.
Connected Device Configuration
Connected Device Configuration is a Java ME specification that defines a runtime environment and core APIs for more capable embedded and network-connected devices such as set-top boxes and smart appliances.
-
D.
Cisco vManage
Cisco vManage is a centralized network management and orchestration platform used to configure, monitor, and manage Cisco SD-WAN deployments.
-
E.
Cisco DNA Center
Cisco DNA Center is a centralized, intent-based network management and automation platform for designing, provisioning, monitoring, and securing Cisco enterprise networks.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Network Device Enrollment Service Target entity description: Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
-
A.
Device Provisioning Protocol
Device Provisioning Protocol is a Wi‑Fi Alliance standard that securely bootstraps and configures devices onto wireless networks using modern cryptographic methods, often as a successor to WPS.
-
B.
Apple Automated Device Enrollment
Apple Automated Device Enrollment is an Apple device management feature that lets organizations automatically enroll and configure iOS, iPadOS, and macOS devices in their mobile device management (MDM) system during initial setup.
-
C.
Connected Device Configuration
Connected Device Configuration is a Java ME specification that defines a runtime environment and core APIs for more capable embedded and network-connected devices such as set-top boxes and smart appliances.
-
D.
Cisco vManage
Cisco vManage is a centralized network management and orchestration platform used to configure, monitor, and manage Cisco SD-WAN deployments.
-
E.
Cisco DNA Center
Cisco DNA Center is a centralized, intent-based network management and automation platform for designing, provisioning, monitoring, and securing Cisco enterprise networks.
- F. None of above. chosen
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
Windows Server role service
ⓘ
certificate enrollment service ⓘ |
| abbreviation |
NDES
NERFINISHED
ⓘ
SCEP NERFINISHED ⓘ |
| availableIn |
Windows Server 2008
NERFINISHED
ⓘ
Windows Server 2008 R2 NERFINISHED ⓘ Windows Server 2012 NERFINISHED ⓘ Windows Server 2012 R2 NERFINISHED ⓘ Windows Server 2016 NERFINISHED ⓘ Windows Server 2019 NERFINISHED ⓘ Windows Server 2022 NERFINISHED ⓘ |
| category | public key infrastructure component ⓘ |
| componentOf | Active Directory Certificate Services NERFINISHED ⓘ |
| configuredFor | one or more SCEP certificate templates ⓘ |
| configuredVia |
IIS Manager
NERFINISHED
ⓘ
NDES configuration wizard ⓘ registry settings ⓘ |
| configuredWith | certificate templates for network devices ⓘ |
| dependsOn | HTTP-based communication ⓘ |
| enables | PKI integration for network infrastructure devices ⓘ |
| exposes | SCEP enrollment URL ⓘ |
| fullName | Network Device Enrollment Service NERFINISHED ⓘ |
| integratesWith |
Active Directory
NERFINISHED
ⓘ
enterprise Certification Authority NERFINISHED ⓘ |
| introducedIn | Windows Server 2008 NERFINISHED ⓘ |
| issues | X.509 certificates NERFINISHED ⓘ |
| purpose | to enable network devices to obtain digital certificates automatically ⓘ |
| requires |
Active Directory Certificate Services Certification Authority
NERFINISHED
ⓘ
IIS NERFINISHED ⓘ Windows Process Activation Service NERFINISHED ⓘ |
| roleServiceOf | AD CS role in Windows Server ⓘ |
| runsOn | Windows Server NERFINISHED ⓘ |
| securityConsideration |
must protect SCEP URL and shared secrets
ⓘ
should be deployed in a secure network segment ⓘ |
| supports |
VPN device certificate enrollment
ⓘ
automatic certificate enrollment for network devices ⓘ certificate renewal for devices ⓘ firewall certificate enrollment ⓘ key archival depending on CA configuration ⓘ non-domain-joined device certificate enrollment ⓘ policy-based certificate issuance via CA ⓘ router certificate enrollment ⓘ switch certificate enrollment ⓘ |
| uses |
MSCEP.dll for SCEP processing
ⓘ
enrollment agent certificates ⓘ enrollment challenge passwords ⓘ service account for NDES operations ⓘ |
| usesProtocol | Simple Certificate Enrollment Protocol NERFINISHED ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Network Device Enrollment Service Description of subject: Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
Referenced by (2)
Full triples — surface form annotated when it differs from this entity's canonical label.