I have a setup where 30 branches auto enroll from a CA server located at the HO. I have no problem with this part, however when i issue the show ca certificates on any routers, I see two certificates( one used for the initiation of the ipsec tunnels and another one used for authenticating the trustpoint)
This last one will expire soon, what will happen if this last one expires? and is there a way to automatically reauthenticate all trustpoints?
The Edit Trustpoint Configuration > Enrollment Settings tab lets you modify information about the selected trustpoint. You can select the option called "Use automatic enrollment" for this purpose. Use automatic enrollment-Specify intention to use SCEP mode. When the indicated trustpoint is configured for SCEP enrollment, the security appliance then downloads the certificates using the SCEP protocol
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...