CHAPTER6 Performing Administrator-Related Operations
C470HD | Users & Administrator's Manual
5. Afterashortperiod,viewintheresultspane'CertsSuccessfullyInstalled'.
Certificate Enrollment using SCEP
[Feature in preview] The device supports certificate enrollment using Simple Certificate
EnrollmentProtocol(SCEP)usingMicrosoft’sNetworkDeviceEnrollmentService(NDES)server,
therebyallowingdevicecertificatesandCAcertificateprovisioningtobescaledtomultiple
devices.
AfterdevicesareprovisionedwithaSCEP-relatedconfiguration,theyreceiveaCAcertificate
fromtheNDES, issueaCertificateSigningRequest(CSR)totheNDESandreceiveadevice
certificatesignedbytheCAcertificate(theonethatthedevicereceivedfromNDES).
Configurethefollowingthreeparameters:
■ security/SCEPEnroll/ca_fingerprint
■ security/SCEPEnroll/password_challenge
■ security/SCEPServerURL
Thenexttableshowstheparameterdescriptions.
Table 6-1: SCEP Parameters
Parameter Description
security/SCEPEnroll/ca_fingerprint Definethethumbprint(hashvalue)for
theCAcertificate.Defaultvalue:NULL.
Networkadminsmustsetitsvalueto
(forexample):
3EBE50003ABF1DF5E6B5A3230B02B856
security/SCEPEnroll/password_challenge Definetheenrollmentchallenge
password.Defaultvalue:NULL.
Networkadminsmustsetitsvalueto
(forexample):
7A7F9FC4BB7625F0935E67EA6D6322ED
security/SCEPServerURL DefinetheNDESserver’sURL.Default:
NULL.
Networkadminsmustsetitsvalueto
(forexample):
https://ndes_derver
- 103 -