User Documentation

Version 1.2 / August 2020 Page 36 / 102
General settings → SCEP (Tab Configuration)
Menu
Configuration → General settings → SCEP
Function
Configuration of the Router for online access to certificates which are stored on a central-
ized online certificate server (SCEP Simple Certification Enrollment Protocol). When setting
up certificate-based VPN connections, the necessary certificates can be obtained directly
from a SCEP server.
Server URL
e.g. http://192.168.1.1/certsrv/mscep.dll
Client Certificate details
Common Name (CN)
Device serial no. as
CN
Auto setting of CN if activated
Country
Free text
State
Free text
Locality
Free text
Organization
Free text
Organizational Unit
Free text
RSA key length (bits)
1024, 2048, 3072 or 4096-bit keylength
Challenge Password
If the SCEP-Server requires a one-time challenge password, it
must be given here. In this case, it is not possible to auto-renew
the certificate
Auto-renew period
Define a number of days. The corresponding number of dates
before the certificate expire, it will be automatically renewed.
This option is disabled if a one-time password (challenge) is re-
quired.
CRL download
If activated, the device will try to obtain an up-to-date certificate
revocation list from the server every hour.
General settings → SCEP (Tab State)
Menu
Configuration → General settings → SCEP
Function
Shows the actual status of SCEP process