BlackBerry Forums Support Community
              

Closed Thread
 
LinkBack Thread Tools
Old 08-26-2014, 09:48 AM   #1 (permalink)
Kul
Talking BlackBerry Encyclopedia
 
Kul's Avatar
 
Join Date: May 2005
Location: London, England.
Model: Z10
Carrier: Vodafone (UK)
Posts: 467
Post Thanks: 21
Thanked 3 Times in 3 Posts
Default Assistance required with setting up SCEP

Please Login to Remove!

I am looking to setup SCEP so users dont have to keep entering their device passwords once their AD passwords are changed.

I thought it was a simple thing .... I was wrong, anyway...

I setup a NDES server and looking to configured SCEP as per Technet article Configure certificate-based authentication for Exchange ActiveSync for exchange 2010.

Once this is done, I believe I have to assign the scep policy to the email policy in BES. What I am not sure is how will current devices (already provisioned) will behave while or once I have set this up ?

Also, how do I get the certs to the device ?, i read i can copy the CA, Int CA and the personal cert in the Certificate folder under shared apps. anything else ?

information seems to be limited on setting this up, any assistance would be greatly appreciated.
Offline  
Old 08-26-2014, 09:56 AM   #2 (permalink)
BlackBerry Elite
 
knottyrope's Avatar
 
Join Date: Jan 2008
Location: Massachusetts
Model: PRIV
OS: 5.1.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 7,232
Post Thanks: 371
Thanked 379 Times in 349 Posts
Default Re: Assistance required with setting up SCEP

can look through this thread
Configuring SCEP server with BB10 - BlackBerry Support Community Forums
__________________
unlock your phone here http://freemyblackberry.com/
I am on http://supportforums.blackberry.com
BES 12 running sweet for my DTEK60
Offline  
The Following User Says Thank You to knottyrope For This Useful Post:
Kul (08-26-2014)
Old 09-09-2014, 09:43 AM   #3 (permalink)
Kul
Talking BlackBerry Encyclopedia
 
Kul's Avatar
 
Join Date: May 2005
Location: London, England.
Model: Z10
Carrier: Vodafone (UK)
Posts: 467
Post Thanks: 21
Thanked 3 Times in 3 Posts
Default Re: Assistance required with setting up SCEP

Few things, RIM support told me the template I was using was wrong and I changed the regkey HKLM\Software\Microsoft\Crytography\MSCEP and changed the values to the correct template.

Also, my UPN is different from Email address, but they said this has been resolved in 10.2 and we are running 10.2

Anyway, now i cant even get to http://<MyServer>/CertSrv/mscep_admin/ as I am getting the error:
Network Device Enrollment Service allows you to obtain certificates for routers or other network devices using the Simple Certificate Enrollment Protocol (SCEP).

You do not have sufficient permission to enroll with SCEP. Please contact your system administrator.

For more information see Using Network Device Enrollment Service .

I have also added Enroll permissions to the service account I use for Enrollment on the CA.

help ??? - how do I resolve this.

I noticed in the Application log on the CA, i have the following error
Event ID :6
Description: The Network Device Enrollment Service cannot provide its password because the user does not have Enroll permissions on the configured certificate template, or the certification authority is not enabled to issue certificates based on the configured certificate template.

Last edited by Kul : 09-09-2014 at 09:46 AM. Reason: addition to notes
Offline  
Old 09-09-2014, 10:02 AM   #4 (permalink)
BlackBerry Elite
 
knottyrope's Avatar
 
Join Date: Jan 2008
Location: Massachusetts
Model: PRIV
OS: 5.1.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 7,232
Post Thanks: 371
Thanked 379 Times in 349 Posts
Default Re: Assistance required with setting up SCEP

this help at all?
KB35003-"Enroll profile sending error. Please, contact your administrator." is displayed when attempting to enroll an iOS device
__________________
unlock your phone here http://freemyblackberry.com/
I am on http://supportforums.blackberry.com
BES 12 running sweet for my DTEK60
Offline  
Old 09-10-2014, 08:58 AM   #5 (permalink)
Kul
Talking BlackBerry Encyclopedia
 
Kul's Avatar
 
Join Date: May 2005
Location: London, England.
Model: Z10
Carrier: Vodafone (UK)
Posts: 467
Post Thanks: 21
Thanked 3 Times in 3 Posts
Default Re: Assistance required with setting up SCEP

not the error i am getting and checked anyway - none of the causes appear in the log files - opening call with RIM and MS now
Offline  
Old 09-15-2014, 06:07 AM   #6 (permalink)
Kul
Talking BlackBerry Encyclopedia
 
Kul's Avatar
 
Join Date: May 2005
Location: London, England.
Model: Z10
Carrier: Vodafone (UK)
Posts: 467
Post Thanks: 21
Thanked 3 Times in 3 Posts
Default Re: Assistance required with setting up SCEP

I think i got it to work, in my case, i had duplicated a user cert rather then a computer type and changed some permissions. Once corrected seems to be working fine. Testing it now.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads for: Assistance required with setting up SCEP
Thread Thread Starter Forum Replies Last Post
Remove IT Policy John Clark RIM Software 572 05-13-2017 05:15 AM
How does user change the BES setting cche BES Admin Corner 12 11-11-2007 06:58 PM
How to get user preference from a custom setting screen ericcwhung Developer Forum 1 09-17-2007 02:16 AM
Newbie to BES - Assistance required. jackarmy83 BES Admin Corner 3 01-15-2007 10:40 AM
Password Required Policy - Question vz9p57 BES Admin Corner 3 07-22-2005 02:33 PM

2PCS 800-1000kV Ultra-High Voltage Pulse Generator Arc Ignition Coil 3.7-7.4V
$6.99
2PCS 800-1000kV Ultra-High Voltage Pulse Generator Arc Ignition Coil 3.7-7.4V pictureDIY 1000KV High Voltage Inverter Pulse Generator Arc Ignition Coil Power Module
$8.23
DIY 1000KV High Voltage Inverter Pulse Generator Arc Ignition Coil Power Module picture36mm x 23mm x 15mm Round Green Iron Inductor Coils Toroid Ferrite Cores New
$1.31
36mm x 23mm x 15mm Round Green Iron Inductor Coils Toroid Ferrite Cores New pictureNice ABB CONTACTOR 140 AMP / 600 VAC / 3 PHASE WITH 110-120V COIL MODEL: A110-30
$17.99
Nice ABB CONTACTOR 140 AMP / 600 VAC / 3 PHASE WITH 110-120V COIL MODEL: A110-30 pictureAtlas Metal - 2119 - SU-4 Evap Coil
$196.56
Atlas Metal - 2119 - SU-4 Evap  Coil picture






Copyright 2004-2016 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.