Certificate Enrollment Using SCEP

RUCKUS provides functionality for certificate enrollment through the use of the Simple Certificate Enrollment Protocol (SCEP). Certificate enrollment is an essential PKI operation in which a system requester successfully receives a certificate from the Certificate Authority (CA).

SCEP is designed to support the following PKI operations:

  • Certificate Authority (CA) public key distribution
  • Registration Authority (RA) public key distribution
  • Certificate enrollment
  • Certificate query
  • Certificate Revocation List (CRL) query
  • Online Certificate Status Protocol (OCSP) query

In this section:

  1. Types of Enrollment
    In FIPS mode, CRL-related commands are blocked. When a user tries to configure a CRL-related command, a message is logged to indicate that the command is not supported in FIPS mode. There are two basic modes: manual enrollment and automatic enrollment.
  2. Requirements for Requesting a Certificate
  3. Communications Between Requesters and the CA
    Communications between requesters and the CA are made secure using SCEP Secure Message Objects, which specifies how the PKCS #7 cryptographic message syntax is used to encrypt and sign the data. To ensure that the signing operation can be completed, the client uses an appropriate (valid) local certificate.
Parent topic: PKI Support for IPsec