Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Dear All I'm trying to setup a DMVPN environment with Win based PKI infrastructure. I would use SCEP for enrollment, and I would also use auto-enroll feature with RSA key roll-over (auto-enroll regenerate). It's working properly, however when a new R...
Hi, Yes, that was the behavior what I saw in my environment (ISR4k, ASR1k, C8200, C8300). If the configs are different, the router will not save the new key without manual intervention. Once you issue we mem manually, obviously the new key will be sa...
Dear All Meanwhile I could figured out this topic in my lab. Looks like the device saves the new key and cert during re-certification, if running config was saved as startup config before. But if running config is newer than the startup config (even ...