Configure A Simple Certificate Enrollment Protocol Client - Digi Connect IT 4 User Manual

Virtual Private Networks (VPN)

Configure a Simple Certificate Enrollment Protocol client

Simple Certificate Enrollment Protocol (SCEP) is a mechanism that allows for large-scale X.509
certificate deployment. You can configure Connect IT 4 device to function as a SCEP client that will
connect to a SCEP server that is used to sign Certificate Signing Requests (CSRs), provide Certificate
Revocation Lists (CRLs), and distribute valid certificates from a Certificate Authority (CA).
Required configuration
Enable the SCEP client.
n
The fully-qualified domain name of the SCEP server to be used for certificate requests.
n
The challenge password provided by the SCEP server that the SCEP client will use when
n
making SCEP requests.
The distinguished name to be used for the CSR.
n
Additional configuration
The number of days that the certificate enrollment can be renewed, prior to the request
n
expiring.

Web
1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access
rights.
2. Access the device configuration:
Remote Manager:
a. Locate your device as described in
device.
b. Click the Device ID.
c. Click Settings.
d. Click to expand Config.
Local Web UI:
a. On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
3. Click Network > SCEP Client.
4. For Add clients, enter a name for the SCEP client and click .
Digi Connect IT® 4 User Guide
Use Digi Remote Manager to view and manage your
IPsec
358