Hi, I’m seeing a “SCEP Root CA certificates removed” banner show up randomly on a few managed computers. It’s not affecting all devices, only around 5–6 out of a larger fleet, and I haven’t noticed any actual impact so far. Apps, management actions, and regular device use still seem to work normally.
There doesn’t seem to be a pattern, and nothing specific was changed on those devices before the banner appeared. Has anyone seen this before? Is this something that needs immediate action?
27 Views
Hi @verbnigge,
This banner can appear when the device status reported in the portal needs to be refreshed, especially if it is only seen on a small number of devices and there is no visible management impact.
A good first step is to run the Scan Device remote action on the affected computers, or across the full fleet if multiple devices are involved. After the scan completes, check whether the “SCEP Root CA certificates removed” banner still appears on those devices.
If the certificate status was stale or waiting for the next inventory update, the banner may clear after the device syncs successfully.
Regards,
Sienna Carter
Hexnode UEM
Checked several of the affected computers again after some time, and the banner seems to have disappeared. I didn’t find any device-side impact while it was showing either.
Hi @verbnigge,
If the banner has cleared and device management continues to work as expected, no further action is usually required. For future occurrences, running Scan Device is the recommended first check to refresh the latest device status in Hexnode.
If the banner persists after a scan or if devices start showing management/certificate-related issues, then the SCEP certificate configuration and associated policies should be reviewed further.
Regards,
Sienna Carter
Hexnode UEM
Don't have an account? Sign up
What's new 
