Manage SCEP client risk

hi, i have a problem with client risk in end point protection status.

i was deploy scep on client, some of client get in into client risk.
how to manage that client dont get status client risk again.

thank you