Call SCEP services with the enroll operation
Substitute the <scep-url> with the URL that was generated when creating the SCEP certificate profile - you can view the URL again by simply clicking on the saved profile.
java -jar ./DigiCertSCEPClient.jar -url <scep-url> -operation enroll -csr device.der.csr -outpath out -debug true
If the enrollment is successful a certificate in DER format will be saved using the same CSR filename, e.g. device.der.cer