In Microsoft Intune, you can add third-party certificate authorities (CA), and have these CAs issue and validate certificates using the Simple Certificate Enrollment Protocol (SCEP). SCEPman is a fully unattended Certificate Authority using Azure Key Vault for Microsoft Intune based certificate deployment. SCEPman is an Azure App Service providing the SCEP and Intune API, using Azure Key Vault based RootCA and certificate signing. No other component is be involved, neither a database nor any other stateful storage except the Key Vault. That said, the SCEPman will not need any backup procedures.