SCEP Client

RouterOS General
1

Hi,

I’m trying to set up the scep client on a 411 but I can’t set up the “store-name”.
When I add the client I’m asked to enter a “store-name” and no matter what I enter I get the following -

failure: At least one field specifying certificate name must be set!

Has anyone had any success or know what I’m doing wrong?

Thanks

SCEP Client
2

You have to enter one of certificate fields, just as error says, common-name, serial-number or any other.

3

Thank you, that works.

One more thing, the SCEP server is listening on port 8777 but I’ve noticed that the requests from the RB are sent to port 80.
Is there a way to change the port?

Thanks

4

Hello.
I have the same problem

When I add the client I’m asked to enter a “store-name” and no matter what I enter I get the following -

failure: At least one field specifying certificate name must be set!

>

and I don't understand what I have to enter

> You have to enter one of certificate fields, just as error says, common-name, serial-number or any other.

Where can I find step-by-step HowTO setup "SCEP Client". [Here](http://wiki.mikrotik.com/wiki/Manual:System/Certificates#SCEP) is minimum info.

Thanks in advance
5

I don’t get it. Mikrotik makes efort to make something possible but don’t make documentation.

6

this code and configuration menus received major overhaul, documentation will be available shortly as SCEP configuration menus become finalized.

7

I try use scep client witt cisco ca server and get an error:

[admin@MikroTik] /certificate scep client> print value-list
name: s15.Core
status: requesting-ca-capabilities-failed
server: 10.70.1.1
path: /cgi-bin
store-name: sample.cer
ca-identity: s15.Core
fingerprint-algorithm: sha1
req-fingerprint:
ca-fingerprint:
common-name: SAMPLE
key-bits: 2048
challenge-password:

I’ve tried different path without success

8

I’ve found right path but ded SCEP client dosn’t work normal.
there are CA server logs:

Feb 20 14:28:18.681: CRYPTO_CS: received a SCEP GetCACaps request
Feb 20 14:28:18.681: CRYPTO_CS: Capabilities sent
Feb 20 14:28:18.741: CRYPTO_CS: received a SCEP GetCACert request
Feb 20 14:28:18.773: CRYPTO_CS: CA certificate sent
Feb 20 14:28:25.565: CRYPTO_CS: received a SCEP request, 3052 bytes
Feb 20 14:28:25.565: CRYPTO_CS: failed to base64 decode request

on mikrotik

status: requesting-certificate-failed