Network Device Enrollment Service
E724317
Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
All labels observed (2)
| Label | Occurrences |
|---|---|
| Network Device Enrollment Service canonical | 4 |
| AD CS enrollment web services | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T8288915 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Network Device Enrollment Service Context triple: [Active Directory Certificate Services, integratesWith, Network Device Enrollment Service]
-
A.
Device Provisioning Protocol
Device Provisioning Protocol is a Wi‑Fi Alliance standard that securely bootstraps and configures devices onto wireless networks using modern cryptographic methods, often as a successor to WPS.
-
B.
Apple Automated Device Enrollment
Apple Automated Device Enrollment is an Apple device management feature that lets organizations automatically enroll and configure iOS, iPadOS, and macOS devices in their mobile device management (MDM) system during initial setup.
-
C.
Connected Device Configuration
Connected Device Configuration is a Java ME specification that defines a runtime environment and core APIs for more capable embedded and network-connected devices such as set-top boxes and smart appliances.
-
D.
Cisco vManage
Cisco vManage is a centralized network management and orchestration platform used to configure, monitor, and manage Cisco SD-WAN deployments.
-
E.
Cisco DNA Center
Cisco DNA Center is a centralized, intent-based network management and automation platform for designing, provisioning, monitoring, and securing Cisco enterprise networks.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Network Device Enrollment Service Target entity description: Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
-
A.
Device Provisioning Protocol
Device Provisioning Protocol is a Wi‑Fi Alliance standard that securely bootstraps and configures devices onto wireless networks using modern cryptographic methods, often as a successor to WPS.
-
B.
Apple Automated Device Enrollment
Apple Automated Device Enrollment is an Apple device management feature that lets organizations automatically enroll and configure iOS, iPadOS, and macOS devices in their mobile device management (MDM) system during initial setup.
-
C.
Connected Device Configuration
Connected Device Configuration is a Java ME specification that defines a runtime environment and core APIs for more capable embedded and network-connected devices such as set-top boxes and smart appliances.
-
D.
Cisco vManage
Cisco vManage is a centralized network management and orchestration platform used to configure, monitor, and manage Cisco SD-WAN deployments.
-
E.
Cisco DNA Center
Cisco DNA Center is a centralized, intent-based network management and automation platform for designing, provisioning, monitoring, and securing Cisco enterprise networks.
- F. None of above. chosen
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
Windows Server role service
ⓘ
certificate enrollment service ⓘ |
| abbreviation |
NDES
ⓘ
SCEP ⓘ |
| availableIn |
Windows Server 2008
ⓘ
Windows Server 2008 R2 ⓘ
linked to:
Windows Server 2008
Windows Server 2012 ⓘ
linked to:
Windows Server
Windows Server 2012 R2 ⓘ
linked to:
Windows Server
Windows Server 2016 ⓘ
linked to:
Windows Server
Windows Server 2019 ⓘ
linked to:
Windows Server
Windows Server 2022 ⓘ
linked to:
Windows Server
|
| category | public key infrastructure component ⓘ |
| componentOf | Active Directory Certificate Services ⓘ |
| configuredFor | one or more SCEP certificate templates ⓘ |
| configuredVia |
IIS Manager
ⓘ
linked to:
IIS
NDES configuration wizard ⓘ registry settings ⓘ |
| configuredWith | certificate templates for network devices ⓘ |
| dependsOn | HTTP-based communication ⓘ |
| enables | PKI integration for network infrastructure devices ⓘ |
| exposes | SCEP enrollment URL ⓘ |
| fullName | Network Device Enrollment Service ⓘ |
| integratesWith |
Active Directory
ⓘ
enterprise Certification Authority ⓘ
linked to:
Active Directory Certificate Services
|
| introducedIn | Windows Server 2008 ⓘ |
| issues | X.509 certificates ⓘ |
| purpose | to enable network devices to obtain digital certificates automatically ⓘ |
| requires |
Active Directory Certificate Services Certification Authority
ⓘ
linked to:
Active Directory Certificate Services
IIS ⓘ Windows Process Activation Service ⓘ |
| roleServiceOf | AD CS role in Windows Server ⓘ |
| runsOn | Windows Server ⓘ |
| securityConsideration |
must protect SCEP URL and shared secrets
ⓘ
should be deployed in a secure network segment ⓘ |
| supports |
VPN device certificate enrollment
ⓘ
automatic certificate enrollment for network devices ⓘ certificate renewal for devices ⓘ firewall certificate enrollment ⓘ key archival depending on CA configuration ⓘ non-domain-joined device certificate enrollment ⓘ policy-based certificate issuance via CA ⓘ router certificate enrollment ⓘ switch certificate enrollment ⓘ |
| uses |
MSCEP.dll for SCEP processing
ⓘ
enrollment agent certificates ⓘ enrollment challenge passwords ⓘ service account for NDES operations ⓘ |
| usesProtocol | Simple Certificate Enrollment Protocol ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Network Device Enrollment Service Description of subject: Network Device Enrollment Service is a Windows Server role service that enables network devices to obtain digital certificates automatically from Active Directory Certificate Services using the Simple Certificate Enrollment Protocol (SCEP).
Referenced by (5)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: Network Device Enrollment Service