Configuring SCEP for eLux

How to enable eLux devices to use SCEP for certificate deployment:

Note:

The eLux package Network Access Control and the included feature package SCEP must be installed on the devices.This may require modifications of the image definition file on the web server via ELIAS.

1. To configure the SCEP agent, use the scep.ini file.Then select the Scout feature Files configured for transfer to transfer the configuration file to the devices.For further information, see Configuring SCEP ini file.

2. Ensure that the devices are running on the correct time.We recommend that you configure a time server.

   The local time must match the time of the certificate authority.

3. To activate the SCEP agent, add the following entry to the terminal.ini file on the devices.To do so, use the Scout feature Advanced file entries:

   File	/setup/terminal.ini
   Section	Network
   Entry	SCEP
   Value	true

   Please note case sensitivity. For further information, see Advanced file entriesin the Scout guide.

4. To use SCEP for 802.1X authentication for LAN, in the Scout Console, for the relevant OU, in the Network device configuration for the LAN profile, select Advanced > IEEE 802.1X authentication > Activate.For further information, see Configuring 802.1X for eLux in the 802.1X guide.

   When using SCEP for other purposes, however, make sure that the above-mentioned option is not selected for the network profile LAN.

The client creates a WPA configuration file from the template /setup/scep/wpa.conf.scep.However, if you have transferred an individual WPA configuration file to /setup/scep/wpa.conf, it will take precedence over the template.