CHAPTER6 Performing Administrator-Related Operations
C455HD | Users & Administrator's Manual
3. Adjacenttothefield'PhonesIPlist'under'MultiOperations',clicktheBrowsebuttonand
thennavigatetoandselectthetxtfilelistingtheIPaddressesofthephonestowhichto
downloadthecertificates.TheIPaddressesarelistedoneundertheother.Eachoccupies
itsownline.Nonotationbetweenthemisrequired.
4. Clickthenowactivated Load Certificatesbuttonshowninthenextfigure,toaddthe
certificatestothephones.
5. Afterashortperiod,viewintheresultspane'CertsSuccessfullyInstalled'.
Certificate Enrollment using SCEP
[Feature in preview] The device supports certificate enrollment using Simple Certificate
EnrollmentProtocol(SCEP)usingMicrosoft’sNetworkDeviceEnrollmentService(NDES)server,
therebyallowingdevicecertificatesandCAcertificateprovisioningtobescaledtomultiple
devices.
AfterdevicesareprovisionedwithaSCEP-relatedconfiguration,theyreceiveaCAcertificate
fromtheNDES, issueaCertificateSigningRequest(CSR)totheNDESandreceiveadevice
certificatesignedbytheCAcertificate(theonethatthedevicereceivedfromNDES).
Configurethefollowingthreeparameters:
■ security/SCEPEnroll/ca_fingerprint
■ security/SCEPEnroll/password_challenge
■ security/SCEPServerURL
Thenexttableshowstheparameterdescriptions.
Table 6-1: SCEP Parameters
Parameter Description
security/SCEPEnroll/ca_fingerprint Definethethumbprint(hashvalue)for
theCAcertificate.Defaultvalue:NULL.
Networkadminsmustsetitsvalueto
(forexample):
- 95 -