Microsoft Active directory - OpenSSL - SCEP

Question

I am trying to create certificate from openSSL and then using SCEP endpoints push it to the Active directory.

1. Create users and groups inside AD Forest
2. Generate Certificate from user's public key using openSSL
3. Push that to AD using SCEP protocol
4. Install certificates to mobile device