SCEP funcionality

Has anyone successfully deployed SCEP on RouterOS? After I approve new certificate requests, I’m getting “requesting-certificate-failed” message.

Mikrotik manual is very vague on SCEP, therefore, I don’t really know what behavior I should expect.

I want to use it to quickly enroll certificates on MT client devices for VPN use.

Log:

19:45:37 certificate,debug decoding degenerate PKCS7 failed: error:0D0C40D8:lib(13):func(196):reason(216) 
19:45:37 certificate,error reply decode failed: 1 
19:45:37 certificate,error client failure: requesting-certificate-failed

Thanks.

grg