As an alternative, SCEP just provides the use of a shared secret, which should be client-specific and used only once.
As an option, SCEP allows for the utilization of a shared key that needs to be specific to individual clients and employed solely once.