Consider the following scenario:
- You deploy certificates to be used for client authentications on network services such as VPN and Wi-Fi.
- You provision a Simple Certificate Enrollment Protocol (SCEP) profile on a Windows 8.1-based device.
- You set to store certificates only with a trusted platform module (TPM) key storage provider (KSP) by using the SCEP profile.