Kryptkeeper
Walkthrough · 23 steps

Enroll devices with SCEP, EST or CMP

Configure device enrollment and see a device enroll.

Enroll devices with SCEP, EST or CMP

As pki-admin

  1. Open /enrollment

    Open /enrollment
  2. Click EST

    Click EST
  3. Click New user

    Click New user
  4. Fill Username with "est-devices-2"

    Fill Username with "est-devices-2"
  5. Fill Allowed DNS suffixes with ".acme.test"

    Fill Allowed DNS suffixes with ".acme.test"
  6. Click Create user

    Click Create user
  7. Click Done

  8. Click CMP

    Click CMP
  9. Click Register trust anchor

    Click Register trust anchor
  10. Fill Label with "Partner CMP root"

    Fill Label with "Partner CMP root"
  11. Fill Certificate with "-----BEGIN CERTIFICATE----- MIICADCCAYagAwIBAgIUZR5XWhuF5nq2BqyW+9/NGsU+bJMwCgYIKoZIzj0EAwIw LzEYMBYGA1UEAwwPUGFydG5lciBSb290IENBMRMwEQYDVQQKDApQYXJ0bmVyIENv MB4XDTI2MTAxODA3MTkwN1oXDTM2MTAxNTA3MTkwN1owLzEYMBYGA1UEAwwPUGFy dG5lciBSb290IENBMRMwEQYDVQQKDApQYXJ0bmVyIENvMHYwEAYHKoZIzj0CAQYF K4EEACIDYgAEKsm1nloX9Yc8a8vUxrhpa1sO411Lhe24OgJAjV8+SCUElIcE3BeV 7PlcdizyywzGlRYTBkd5tG/rOayPuQ8Pjkc1QpDX6SJDof8tWLeVSZxjfeVtCcTJ +BbkNSylAPajo2MwYTAdBgNVHQ4EFgQU79AEThn7Ukm1mv/0qbC6SrzHvPcwHwYD VR0jBBgwFoAU79AEThn7Ukm1mv/0qbC6SrzHvPcwDwYDVR0TAQH/BAUwAwEB/zAO BgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwIDaAAwZQIwGg6b3O+MFQt54jA2j2CS oO2a7WmlIOuI8X0mzZA71Ui9w3W0XcnvBlxG9gMab2tPAjEAqp+JJ1AmRM//GOUv 6pKT12ZwZSstbdycoO7sCxprHxDwTPMNh2z9OFciv0WC1OZv -----END CERTIFICATE-----"

    Fill Certificate with "-----BEGIN CERTIFICATE-----
MIICADCCAYagAwIBAgIUZR5XWhuF5nq2BqyW+9/NGsU+bJMwCgYIKoZIzj0EAwIw
LzEYMBYGA1UEAwwPUGFydG5lciBSb290IENBMRMwEQYDVQQKDApQYXJ0bmVyIENv
MB4XDTI2MTAxODA3MTkwN1oXDTM2MTAxNTA3MTkwN1owLzEYMBYGA1UEAwwPUGFy
dG5lciBSb290IENBMRMwEQYDVQQKDApQYXJ0bmVyIENvMHYwEAYHKoZIzj0CAQYF
K4EEACIDYgAEKsm1nloX9Yc8a8vUxrhpa1sO411Lhe24OgJAjV8+SCUElIcE3BeV
7PlcdizyywzGlRYTBkd5tG/rOayPuQ8Pjkc1QpDX6SJDof8tWLeVSZxjfeVtCcTJ
+BbkNSylAPajo2MwYTAdBgNVHQ4EFgQU79AEThn7Ukm1mv/0qbC6SrzHvPcwHwYD
VR0jBBgwFoAU79AEThn7Ukm1mv/0qbC6SrzHvPcwDwYDVR0TAQH/BAUwAwEB/zAO
BgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwIDaAAwZQIwGg6b3O+MFQt54jA2j2CS
oO2a7WmlIOuI8X0mzZA71Ui9w3W0XcnvBlxG9gMab2tPAjEAqp+JJ1AmRM//GOUv
6pKT12ZwZSstbdycoO7sCxprHxDwTPMNh2z9OFciv0WC1OZv
-----END CERTIFICATE-----"
  12. Click Register anchor

    Click Register anchor
  13. Click New PBM secret

    Click New PBM secret
  14. Fill Label with "lab-switch-secret"

    Fill Label with "lab-switch-secret"
  15. Click Create secret

    Click Create secret
  16. Click Done

SCEP enabled (KRYPTKEEPER_SCEP_ENABLED=true)

As pki-admin

  1. Open /enrollment

    Open /enrollment
  2. Click New challenge

    Click New challenge
  3. Fill Common name with "lab-switch.acme.test"

    Fill Common name with "lab-switch.acme.test"
  4. Fill DNS names with "lab-switch.acme.test"

    Fill DNS names with "lab-switch.acme.test"
  5. Select "1h" in Valid for

    Select "1h" in Valid for
  6. Click Create challenge

    Click Create challenge
  7. Click Done