Network Security Manager On-Premises Administration Guide

Table of Contents

Configuring SCEP

SCEP protocol simplifies the certificate issuance process by using a URL and a shared secret to communicate with a PKI.

To configure SCEP

  1. Navigate to Manager View | Home > Global Objects > Certificates page.
  2. Click SCEP on the top right corner.
  3. Fill the below details:

    • CSR List - Select a certificate signing request (CSR) from the list.

    • CA URL - Enter the URL of the certificate authority.
    • Challenge Password (Optional) - Enter the password used to authenticate the enrollment request.
    • Request Count - Enter the number of requests. You can add a value between 1 and 65535. The default value is 256.
    • Polling Interval (sec) - Enter duration of time, in seconds, between the sending of polling messages. You can add a value between 1 and 65535. The default value is 30 seconds.
    • Max Polling Time(sec) - Enter the duration of time, in seconds, the firewall waits for a response to a polling message before timing out. You can add a value between 1 and 65535. The default value is 28800 seconds (8 hours).

  4. Click SCEP to apply the SCEP configuration.