Hi Jean-Baptiste, > The SCEP enrollment works fine as you specified, and after generating a > new key. I signed in the WebUI as RA “rob” to approve the request. As I > continue to read the document, could you answer the following questions? > > • Can the Request approval be done automatically, instead of waiting for > the RA intervention.
Yes, one of the most important features of OpenXPKI is automation support with fine-grained control about the criteria which must be met for automatic approval. The autoapproval policy can be set individually for each configured enrollment endpoint. > • Can a Renewal request be issued if the certificate just enrolled is not > expired (I’ve yet to test it). Yes, of course. It is possible to fine-tune the criteria to be met for automatic renewal. The default is to accept a renewal request authorized by the old, existing certificate and automatically issue the new certificate if the renewal request has been n days before expiration. Cheers Martin _______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
