How to Request a SCEP challenge

This section details how you can get a SCEP Challenge.

1. Log in to Horizon Registration Authority Interface

2. Access My requests from the drawer: myRequest

3. Click on add button

4. Select Request SCEP Challenge

You must have the permission to request a SCEP challenge on at least one SCEP profile.

Profile tab

1. Select the SCEP profile

2. Click on next button

Metadata tab

1. Fill in all the mandatory fields:

  • Labels(string):
    The labels are used for permission, email and request search.

  • Contact email address(string email format):
    Used if an email configuration is set. An email can be sent each time the request status changes (see request lifecycle).

  • Requester comment(string):
    This comment appears:

    • to the approver when your request is in the pending status

    • in the certificate information after the enrollment

2. Click on next button

Summary

If you own the enrolling permission on the SCEP profile:

1. Click on the Retrieve challenge button

If you own the request permission on the SCEP profile:

1. Click on request button

You have to wait that your request is approved by an operator and its status is 'completed', in order to use your SCEP challenge

2. click on View Request viewRequest

You now have access to your SCEP challenge

In order to enroll using SCEP you will need at least a challenge and the SCEP endpoint:

In case you use the NDES emulation, the enrollment and challenge URLs will be respectively: - https://<horizon_url>/certsrv/<profile>/mscep - https://<horizon_url>/certsrv/<profile>/mscep_admin

You can cancel your request at any time, as long as the request status is pending, by clicking on cancelRequest