Virtual PrivateNetworks(VPN) IPsec
IX20 User Guide
542
10. For Password, type the challenge password. This correspondsto the Default enrollment
password on the Fortinet server.
11. Click to expand Distinguished Name.
12. Typethe value for each appropriate Distinguished Name attribute. The values entered here
must correspond to the DNattributes in the Enrollment Request on the Fortinet server.
13. Click Apply to save the configuration and apply the change.
Command line
1. Select the device in Remote Manager and click Actions> Open Console, or log into the IX20
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to accessthe Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Add a new SCEPclient, for example, Fortinet_SCEP_client:
(config)> add network scep_client Fortinet_SCEP_client
(config network scep_client Fortinet_SCEP_client
)>
4. Enable the SCEPclient:
(config network scep_client Fortinet_SCEP_client)> enable true
(config network scep_client Fortinet_SCEP_client)>
5. Set the url parameter to the fully qualified domain name or IPaddressof the SCEPserver:
(config network scep_client Fortinet_SCEP_client)> server url
https://fortinet.example.com
(config network scep_client Fortinet_SCEP_client)>
6. Set the challenge password as configured on the SCEP server. This correspondsto the Default
enrollment password on the Fortinet server.