PKI configuration examples

Unless otherwise noted, devices in the configuration examples are operating in non-FIPS mode.

When the CA uses Windows Server, the SCEP add-on is required, and you must use the certificate request from ra command to specify that the entity request a certificate from an RA.

When the CA uses RSA Keon, the SCEP add-on is not required, and you must use the certificate request from ca command to specify that the entity request a certificate from a CA.