Can you paste us your CA & Client configs? Regards,
Piotr Kaluzny : Sr Instructor : iPexpert <http://www.ipexpert.com> CCIE # 25665 :: Security *:: World-Class Cisco Certification Training* Direct: +1-810-326-1444 :: Free Videos <http://www.youtube.com/ipexpertinc> :: Free Training / Product Offerings <https://www.facebook.com/IPexpert> :: CCIE Blog <http://blog.ipexpert.com/> :: Twitter <https://twitter.com/ipexpert> On Wed, Apr 23, 2014 at 2:06 AM, Bruno Silva <auranpr...@gmail.com> wrote: > Hi Dossou, > > Are you sure you correctly enrolled to an scep endpoint? As for ur debug > you're trying to use an scep certificate that has not been signed. > > If you are using scep you shoukd use enrollment-url > http://x.x.x.x:80/certsrv/mscep/mscep.dll and after that the certificate > should be issued by the ca server. If the enrollment acceptance is not > automatic u you should allow the endpoint to issue the certificate. Also > you should download the crl from the ca so you know what certificates are > still valid. > > As per your debug your certificate is not a valid certificate issued by > the ca. > > If the steps above did not clarify your issue I'll be more than glad to > help you. > > Enviada do meu iPhone > > > Em 22/04/2014, às 19:16, s.a.dos...@videotron.ca escreveu: > > > > Hello > > > > I am trying to complete task 3 : IPv6 L2L IOs and keep getting this > message > > > > %PKI-6-CERTFAIL: Certificate enrollment failed. > > > > > > I issued debug commands on the server (debug cry pki trans ) and got this > > Apr 22 21:48:56.055: CRYPTO_CS: trans id - > 3FE0CA96FD6FF8C4814CB4833029D6D1 > > Apr 22 21:48:56.091: CRYPTO_CS: failed to open env data > > Apr 22 21:48:56.091: CRYPTO_CS: read SCEP: unregistered and unbound > service SCEP_READ_DB_12 > > Apr 22 21:48:56.091: CRYPTO_CS: failed to read SCEP request > > R2# > > > > > > The time on the server and R10 and R11 is ok : NTP status is synchronized > > > > Thank you for helping > > > > > > _______________________________________________ > > Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: > > > > iPexpert on YouTube: www.youtube.com/ipexpertinc > _______________________________________________ > Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: > > iPexpert on YouTube: www.youtube.com/ipexpertinc
_______________________________________________ Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: iPexpert on YouTube: www.youtube.com/ipexpertinc
