For general instructions on installing the Certificate Registration Point role, see SCEP certificate enrolling using ConfigMgr 2012, CRP, NDES and Windows Intune. If you have some weird and obscure errors, then this post might help.