Configure A Simple Certificate Enrollment Protocol Client - Digi LR54 User Manual

Virtual Private Networks (VPN)
sensitive_data: Also includes sensitive material in dumps (for example, encryption
n
keys).
4. Save the configuration and apply the change:
(config)> save
Configuration saved.
>
5. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.

Configure a Simple Certificate Enrollment Protocol client

Simple Certificate Enrollment Protocol (SCEP) is a mechanism that allows for large-scale X.509
certificate deployment. You can configure LR54 device to function as a SCEP client that will connect to
a SCEP server that is used to sign Certificate Signing Requests (CSRs), provide Certificate Revocation
Lists (CRLs), and distribute valid certificates from a Certificate Authority (CA).
Required configuration
Enable the SCEP client.
n
The fully-qualified domain name of the SCEP server to be used for certificate requests.
n
The challenge password provided by the SCEP server that the SCEP client will use when
n
making SCEP requests.
The distinguished name to be used for the CSR.
n
Additional configuration
The number of days that the certificate enrollment can be renewed, prior to the request
n
expiring.

Web
1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access
rights.
2. Access the device configuration:
Remote Manager:
a. Locate your device as described in
device.
b. Click the Device ID.
c. Click Settings.
d. Click to expand Config.
Local Web UI:
LR54 User Guide
Use Digi Remote Manager to view and manage your
IPsec
478