DMVPN Hub as it's own CA Server?

[d.parks]

Hello,

I'm trying to setup Certificate authentication for my DMVPN using one of my hub routers as the IOS CA.

Is it possible for the Hub/CA router to generate/issue itself a cert for authentication? The router is rejecting the enroll command, saying that the trustpoint is being used by the IOS CA.

[fanheuser]

The CA trustpoint cannot be used for this purpose. But you can create another trustpoint on the CA router, where you give all enrollment parameters.