cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1313
Views
5
Helpful
2
Replies

Automatic Certificate Requests Using SCEP

allen.malanda_2
Level 1
Level 1

Hello,

I am using the Cisco ASA 5540 (8.2(1)11) and MS Enterprise Server 2k3 certificate service. I’ve configured Cisco AnyConnect XML profile to auto enroll for certificate. It's working great but it's using the IPSEC (Offline Request) template and its intended purpose is IP security IKE intermediate. Is it possible to use my own custom template? If yes, where do I configure it?

Thanks,

2 Replies 2

Marcin Latosiewicz
Cisco Employee
Cisco Employee

Allen,

If I remember correctly, and I'm not dealing with MS CA daily, the certificate templates are something that only exists on MS CA (ie it's the server that generates certificate using particular template, the information is not in CSR)

Hopefully someone here will know, but I'd suggest to lauch a parallel thread on MS forums.

Marcin

Todd Starling
Level 1
Level 1

Unfortunately the Windows 2003 SCEP server is limited to the IPSEC Offline certificate template. In order to get

custom templates you must use the Windows 2008 NDES server. In that version you can have unique templates for

Encryption, Signing, and General Purpose.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: