I have configured a SCEP server and downloaded and imported the certificate:crypto pki trustpoint XXXXXenrollment mode raenrollment url http://xxxxxxxxxxxxxx:80/x/x/x/x.dllusage ssl-serverserial numberip.address x.x.x.xvrf Mgmt-vrfrevocation-chekc cr...

Forgive the longevity of this post. We have an ACAS scanner that using a hard coded PIN to scan our network elements. The PIN is then passed to an RSA server via RADIUS. All of the scans to ASR1001-Xs work, but the scans to switches sometimes succeed...