With a FMC managed FTD, when you enroll the device for a certificate from a SCEP CA (Windows Server in this case). Where is the request initiated from? Is it the FTD's management interface or one of its data interfaces? I just assumed it would be the out-of-band management interface that FMC uses to communicate with it, however I don't think this is the case.
Cheers
Andy