Obtaining Digital Certificates Online

Simple Certificate Enrollment Protocol (SCEP) uses the online method to request digital certificates. To obtain a certificate online, do the following:

1. Generate a key pair in the device. See Generating a Public-Private Key Pair .
2. Create a CA profile containing information specific to a CA. You can have multiple CA profiles on the device. For example, you might have one profile for Microsoft and one for Entrust. See Configuring a Certificate Authority Profile.
3. Enroll the CA certificate onto the device. See Enrolling a CA Certificate Online.
4. Obtain a local certificate (also known as a personal certificate) online from the CA whose CA certificate you have previously loaded. See Enrolling a Local Certificate Online .
5. Configure automatic re-enrollment. See Understanding SecurID User Authentication.