Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Concentrator SSL Certificate from Microsoft CA

Obtaining identity certificates from a MS CA works fine using SCEP, and so does obtaining an SSL certificate. Only problem with the SSL cert is that it doesn't actually work afterwards for HTTPS management.

I know this is related to the type of cert issued by SCEP - this is an IPSec identity cert, which is not suitable for SSL usage. I've proved this by manually enrolling an SSL certificate using all certificate templates on the MS CA, with only cert issued using the Web Server template actually working.

Does any one have a technical explanation as to why - is it related to the key usage or enhanced key usage fields in the certificate? What parameters does an SSL certificate have that are different to an identity certificate?over

CreatePlease login to create content