The SCEP (Simple Certificate Enrollment Protocol) is the more like the defacto protocol for device enrollment. It pushes the digital certificates to the device which can be used for authentication, and other cryptographic purposes.
Can CMP be used instead of the SCEP? Since CMP is the standard protocol to communicate with any CA that implements it, can an application residing on the device (say a mobile/laptop) use CMP to communicate with a CA to request a certificate and install it in the device which can then be used for the authentication purposes? And possible the whole life-cycle management of the device identity.