Certificate Enrollment Using Scep; Table 1-3: Scep Parameters - AudioCodes RXV81 User Manual

User's & Administrator's Manual
1.8

Certificate Enrollment using SCEP

The device supports certif icate enrollment using Simple Certif icate Enrollment Protocol (SCEP)
using Microsof t's Network Device Enrollment Service (NDES) server without using AudioCodes'
OVOC, thereby allowing device certif icates and CA certif icate provisioning to be scaled to multiple
devices.
Af ter devices are provisioned with a SCEP-related conf iguration, they receive a CA certif icate f rom
the NDES (via parameter 'security/ca_certif icate/0/uri'), issue a Certif icate Signing Request (CSR)
to the NDES and receive a device certif icate signed by t he CA certif icate (the one that the device
received f rom NDES).
Network administrators must conf igure the f ollowing three parameters:
◼
security/SCEPEnroll/ca_f ingerprint
◼
security/SCEPEnroll/password_challenge
◼
security/SCEPServerURL
The next table shows the parameter descriptions.
security/SCEPEnroll/ca_f ingerprint
security/SCEPEnroll/password_challenge
security/SCEPServerURL
security/SCEPEnroll/renewal/advancethreshold
security/SCEPEnroll/rollover/advancethreshold
Version 2.4

Table 1-3: SCEP Parameters

Parameter Description
Def ine the thumbprint (hash value) f or the CA
certif icate. Def ault value: NULL.
Network admins must set its value to (f or
example):
3EBE50003ABF1DF5E6B5A3230B02B856
Def ine the enrollment challenge password. Def ault
value: NULL.
Network admins must set its value to (f or
example):
7A7F9FC4BB7625F0935E67EA6D6322ED
Def ine the NDES server's URL. Def ault: NULL.
Network admins must set its value to (f or
example):
https://ndes_derver
Def ine the renewal advance threshold of the
device certif icate.
Conf igure between 50 and 100 (in units of
percentage)
Def ault: 80
This indicates that a renewal of the certif icate
(device.crt) will be initiated when 80 percent of its
validity is reached.
Specif y the threshold of the CA Root certif icate's
validity at which to initiate a renewal.
Conf igure between 50 and 100 (in units of
percentage).
Def ault: 90
This indicates a renewal of the certif icate
(CAROOT.crt.) will be initiated when 90 percent of
its validity is reached.
15 RXV81 MTR on Android Video Collaboration Bar
Contents