SCEP Implementation on Trio / VVX

[SR_MCSE]

It has been a while since I last setup NDES on a Windows server to proxy the Certificate requests from an endpoint to an internal certificate server. (Think back to when the Blackberry 10 came out). 

I've just upgraded my fleet of VVX's to 5.9.0 and SCEP is supported now on this platform. 

Has anyone started to look at / or has already implemented SCEP on the Trio / VVX line to obtain certificates on the phone for security functions like 802.1x authentication? 

Were you able to find any suitable documentation for implementation? 

[SteffenBaierUK]

Hello @SR_MCSE ,

Welcome back to the Poly Community.

Please ensure you always check the FAQ's and/or utilize the community search before posting any new topics or follow up posts.

Nov 13, 2018 Question: Do Poly Phones support SCEP?

Resolution: Please check => here <=

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

[SR_MCSE]

The VVX in release 5.9 supports SCEP as per page 6 in the 5.9.0.9373 Release Notes. 

The bigger question is how to debug issues with this method of obtaining the certificates. NDES setup is outside the scope of this question. 

Does a troubleshooting guide exist to help with errors that are displayed in the SCEP setup area of the phone? 

SCEP:Error while certificate encryption/decryption is what I have so far. 

I have been able to get the phone to make the CSR and send it over to my SCEP/NDES server to forward on to my internal issuing CA. 

The result shows that my CA cert has been issued into the Auto Prov CA section automatically. I would have expected the certificate issued from my CA to show up into the device certificate section under Auto Prov Credential. 

I am sure that once the device certificate is present, I can then switch EAP Method to use EAP-TLS for my dotX authentication. 

[SteffenBaierUK]

Hello @SR_MCSE ,

the reply post includes troubleshooting information for end-users.

If you are unable to utilize these or they are not helping with your issue the next step is a support ticket.

In order to raise a support ticket, you need to work with your Poly reseller as they may need to do this for you.

End Customers are usually unable to open a ticket directly with Poly support.

If this is some sort of an Internet discounter providing your MAC address or your Poly devices serial will enable us to look up who would be able to support you. This may not be who you purchased the Poly device from.

If the unit is no longer within the warranty please be prepared to Pay Per Incident / PPI. This is all outlined in detail here

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier