PIX certificate issue

[SDWorx_2]

I'm trying to connect a PIX FW and a VPN 3015 with the use of certificates.

I followed the instructions found in TAC, but at a given moment there's a command that configures your CA server to get the certificates, and it's here that it goes wrong.

--> ca identity abcd 10.1.0.2:/certsrv/mscep/mscep.dll <--

The given path and dll are not found on my W2 CA server: mscep/mscep.dll !

Any idea what went wrong or do I need to point to another file on our W2K CA server ?

[mnaveen]

Hi,

The first thing is to check is whether the mscep.dll add-on is installed properly or not and restart the CA service. If that is ok, then check if you are going through any known problems from the link.

http://www.cisco.com/en/US/products/sw/cscowork/ps3994/prod_release_note09186a00800e7ab8.html

There is a known issue from Microsoft's side as well. "MSCEP.DLL Add-on No Longer Functions After One Successful Enrollment", courtesy:Microsoft Knowledge Base Article - 272164.

http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b272164

Verify if you are not running through any of these.

Cheers :-))

Naveen

mnaveen@cisco.com