- This topic has 21 replies, 6 voices, and was last updated 2 years, 11 months ago by
.
-
Posts
-
Why should it renew the cert? Is it expired?
It will earliest renew a cert if the life time is half way done.CG
Are you still using WMS 1.4?
WMS, wnos.ini or WMS Advanced section?
ThinOS 8 or 9?
Post your config.CG
I am using WMS 1.4, thinOs 8. below are the configurations I used
INI:
ScepAutoEnroll=yes \
AutoRenew=yes \
CommonName=$TN Organization=WyseDevice \
KeyUsage=digitalSignature;keyEncipherment \
KeyLength=2048 \
RequestURL=pki.***/certsrv/mscep/mscep.dll \
CACertHashType=MD5 \
CACertHash=0B***F \
ScepAdminURL=pki.***/certsrv/mscep_admin \
ScepUser=_svc_wysedevicejoin \
ScepUserDomain= ****\
ScepUserPwd=**** \
IEEE8021X=yes network=wired access=WPA-ENT ServerValidate=yes eap=yes eaptype=EAP-TLS tlsclntcert=$TN.pfx tlsauthtype=machine \
subAltName=$TNHello All,
I was finally able to get it working correctly, by making sure the NDES services wasn’t running on the CA. Once I moved the role to its own server, the SCEP client renewed its certificate as expected.
The annoying part is SCEP works the first time with the NDES running on the CA but the renewal mechanism does not work. I even pointed the client I had auto-renew back to my original CA and it wouldn’t renew the cert. (I set the Cert to only have a 1 hour expiry during this test)
Hope this helps.
- You must be logged in to reply to this topic.