Hello,
I am having a bit of a strange problem. I am trying to get a certificate from an MS-SCEP Server. If the DeviceAuth template (on the MS CA) is set not to require manager approval, it works. When I enable manager approval, I see the request get created and go into Pending. Once it is there, whether I issue it or not the request shows as REJECTED by the CA. Looking at the debug logs (debug crypto pki trans and debug crypto pki scep) I see a GetCACert request, a PKCSReq, a CertRep - PENDING, a GetCertInitial, a CertRep - PENDING, another GetCertInitial, then a CertRep - REJECTED, and after that I see status = 101 and Fail Info=4.
The trustpoint configuration is fairly straight-forward:
crypto pki trustpoint TP_Name
enrollment mode ra
enrollment url http://<IP of SCEP Server>:80/CertSrv/mscep/mscep.dll
usage ike
serial-number
subject-name <Text string>
vrf <VRF Name>
revocation-check none
rsakeypair <RSA Key Name> 2048
That's all I have - has anyone got any ideas?
Thanks,
Brian
