One of the biggest differences between FEP 2010 and SCEP 2012 is how much easier the core infrastructure is to set up. It is now lightning quick to deploy the additional role required for your primary site or central administration site.

The only prerequisite for the endpoint protection point role is that the software update point is also deployed, which is covered later in this chapter. The software update point is needed because this is used to obtain the latest definition updates for endpoint protection.

Your clients will then download and install the definition updates just like regular updates, and you can deploy them using automatic deployment rules.