Configuring A Router For Scep Enrollment; Generating The Scep Certificate For A Router - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Chapter 4. Requesting, Enrolling, and Managing Certificates

4.4.1. Configuring a Router for SCEP Enrollment

NOTE
Not all versions of router IOS have the relevant crypto features. Make sure that the
firmware image has the Certification Authority Interoperability feature. Certificate System
SCEP support was tested on a Cisco 2611 router running IOS C2600 Software (C2600-
JK9S-M), version 12.2(40), RELEASE SOFTWARE (fc1).
Before enrolling SCEP certificates on the router, make sure that the router is appropriately configured:
• The router must be configured with an IP address, DNS server, and routing information.
• The router's date/time must be correct.
• The router's hostname and dnsname must be configured.
See the router documentation for instructions on configuring the router hardware.

4.4.2. Generating the SCEP Certificate for a Router

1. In the RA services page, click the SCEP Enrollment link.
2. Click the Pin Creation link.
3. Fill in the information for the certificate request.
4. Click the Submit button.
86