Use SCEP certificate profiles with Microsoft Intune

Profile: Select SCEP certificate. Or, select Templates > SCEP certificate. For Android Enterprise, Profile type is divided into two categories, Fully Managed, Dedicated, and Corporate-Owned Work Profile and Personally-Owned Work Profile. Be sure to select the correct SCEP certificate profile for the devices you manage.

https://learn.microsoft.com/en-us/mem/intune/protect/certificates-profile-scep