Hello,
i have been tasked to setup a PKI for a new site-to-site VPN in lab.
I have successfully built that PKI using Cisco router as the CA following this guide:
https://supportforums.cisco.com/document/57441/ios-ca-basic-deployment-certificate-enrollment-and-signing-process
That was kind of simple. However the task was to setup the PKI using Linux as the CA.
First question i have is, are there any drawbacks using Cisco router acting as a CA ? Is there any kind of limit of clients i can handle? The only reason i know is that the Cisco router will introduce costs, where an CA on a Linux server is free. Are there other constraints ?
I have been reading tutorials over and over again but i did not find a good tutorial building a PKI between Cisco router and a Linux machine.
I have tested following in lab:
TinyCa - I did not succeed to even manually perform a certification request. I am not sure if TinyCA supports SCEP.
dogtag - i did not succeed to install dogtag . I installed CentOS, but stuck where i need to install the Fedora themes. This guide seems to be quit old..
I will try now following:
openxpki
openca
ejbca
Can anyone provide me with some tutorials on how to implement scep on these system ? Can some give a recomendation on which PKI system to choose ?
Many thanks,
Oliver
