topic Re: SSL fails to enroll with MS CA using SCEP. in Application Networking https://community.cisco.com/t5/application-networking/ssl-fails-to-enroll-with-ms-ca-using-scep/m-p/1345656#M28007 <HTML><HEAD></HEAD><BODY><P>Sorry.</P><P>The correct command is</P><P></P><P>crypto ca enroll "ca name"</P><P></P><P></P><P>Anyway I have some problems with template from MS CA.</P><P>Thanks for help.</P><P>Regards.</P><P>Andrea</P></BODY></HTML> Thu, 27 Aug 2009 13:55:07 GMT andrea.meconi 2009-08-27T13:55:07Z SSL fails to enroll with MS CA using SCEP. https://community.cisco.com/t5/application-networking/ssl-fails-to-enroll-with-ms-ca-using-scep/m-p/1345654#M28005 <P>When I try to enroll to get SSL certificate using SCEP I receive a message</P><P></P><P>R1(config)#crypto ca authenticate ca</P><P>Certificate has the following attributes:</P><P> Fingerprint MD5: D6E7527B 9BAFF7D3 5631CE4D 2A5BA341 </P><P> Fingerprint SHA1: 67C695F8 B9BE93A9 8769947C FC3E3C9C 95B93B30 </P><P></P><P>% Do you accept this certificate? [yes/no]: yes</P><P>Trustpoint CA certificate accepted.</P><P>R1(config)#</P><P>R1(config)#crypto ca enroll google</P><P>% You must authenticate the Certificate Authority before you can enroll with it.</P><P></P><P>Why? I have already authenticate CA!</P><P>Thanks.</P><P>Andrea</P> Fri, 21 Aug 2009 11:46:11 GMT https://community.cisco.com/t5/application-networking/ssl-fails-to-enroll-with-ms-ca-using-scep/m-p/1345654#M28005 andrea.meconi 2009-08-21T11:46:11Z Re: SSL fails to enroll with MS CA using SCEP. https://community.cisco.com/t5/application-networking/ssl-fails-to-enroll-with-ms-ca-using-scep/m-p/1345655#M28006 <HTML><HEAD></HEAD><BODY><P>Are you trying to configure multiple CAs (trusted roots) using SCEP ? Verify the CA is enrolled already or not with this command show crypto key mypubkey rsa.</P></BODY></HTML> Thu, 27 Aug 2009 12:30:57 GMT https://community.cisco.com/t5/application-networking/ssl-fails-to-enroll-with-ms-ca-using-scep/m-p/1345655#M28006 sadbulali 2009-08-27T12:30:57Z Re: SSL fails to enroll with MS CA using SCEP. https://community.cisco.com/t5/application-networking/ssl-fails-to-enroll-with-ms-ca-using-scep/m-p/1345656#M28007 <HTML><HEAD></HEAD><BODY><P>Sorry.</P><P>The correct command is</P><P></P><P>crypto ca enroll "ca name"</P><P></P><P></P><P>Anyway I have some problems with template from MS CA.</P><P>Thanks for help.</P><P>Regards.</P><P>Andrea</P></BODY></HTML> Thu, 27 Aug 2009 13:55:07 GMT https://community.cisco.com/t5/application-networking/ssl-fails-to-enroll-with-ms-ca-using-scep/m-p/1345656#M28007 andrea.meconi 2009-08-27T13:55:07Z