cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2957
Views
0
Helpful
2
Replies

SSL fails to enroll with MS CA using SCEP.

andrea.meconi
Level 2
Level 2

When I try to enroll to get SSL certificate using SCEP I receive a message

R1(config)#crypto ca authenticate ca

Certificate has the following attributes:

Fingerprint MD5: D6E7527B 9BAFF7D3 5631CE4D 2A5BA341

Fingerprint SHA1: 67C695F8 B9BE93A9 8769947C FC3E3C9C 95B93B30

% Do you accept this certificate? [yes/no]: yes

Trustpoint CA certificate accepted.

R1(config)#

R1(config)#crypto ca enroll google

% You must authenticate the Certificate Authority before you can enroll with it.

Why? I have already authenticate CA!

Thanks.

Andrea

2 Replies 2

sadbulali
Level 4
Level 4

Are you trying to configure multiple CAs (trusted roots) using SCEP ? Verify the CA is enrolled already or not with this command show crypto key mypubkey rsa.

Sorry.

The correct command is

crypto ca enroll "ca name"

Anyway I have some problems with template from MS CA.

Thanks for help.

Regards.

Andrea

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: