[Openca-Users] Setting up SCEP for Cisco devices

[Pascal VERMEIRE]

Hi folks,   At the moment we need the openca server for cisco-vpn-device authentication. So I suppose that only the CA-server and SCEP-server need to be installed (is this correct - or is only the scep-interface needed so that the certificates for the vpn-devices are generated by the scep-server instead of the ca-server ??). We still need to edit the config.xml (or scep.conf and run the script but for us the following point in the administration guide is not clear - you have to fill out following parameters:   ScepRAKey, ScepRACert, CepRAPasswd   How must be generate this key,certificate ? or where do we get if from ? Why do you need this key and certificate as you should have a key and self signed certificate for the ca-server which will issue certificates for all vpn-devices ?   tia Pascal Vermeire