Руководство По Устранению Ошибки для Cisco Cisco Identity Services Engine Express License Bundle

Contents

Introduction

Prerequisites

Requirements

Components Used

Problem

Solution

1. Identify old private keys

2. Delete old private keys

3. Delete old MSCEP-RA ceritificates

4. Generate new certificates for SCEP

4.1. Generate the Exchange Enrollment Certificate

4.2. Generate the CEP Encryption Certificate

5. Verify

6. Restart IIS

7. Create new SCEP RA profile

8. Modify certificate template

References

Introduction

This document describes how to renew two certificates that are used for Simple Certificate
Enrollment Protocol (SCEP): Exchange Enrollment Agent and CEP Encryption certificate on
Microsoft Active Directory 2012.

Prerequisites

Requirements

Cisco recommends that you have knowledge of these topics:

Basic knowledge of Microsoft Active Directory configuration

●

Basic knowledge of Public Key Infrastracture (PKI)

●

Basic knowledge of Identity Services Engine (ISE)

●

Components Used

The information in this document is based on these software and hardware versions:

Cisco Identity Services Engine version 2.0

●

Microsoft Active Directory 2012 R2

●

Problem