Agreed,Without SCEP Proxy using the Enrollment Challenge Password, what is the point of the Certificate.If the SCEP Proxy enrolls the user with a new certificate based simply on their AD password and group membership, how is that Enrollment protected...