Intelligent Node Software 4.0.0
Integration with SCEP Key Server
In this release, the Cisco Intelligent Node integrates with a Simple Certificate Enrollment Protocol(SCEP) server version 2.2.0. The integration allows you to manage an SCEP server independently, which acts as a centralized and secure certificate management solution. The benefit of using a SCEP server is that you can create your own application similar to the iNode manager to manage the nodes.
Limitations:
Intelligent Node software version 4.0.0 isn’t compatible with iNode Manager 23.1 and earlier versions.
Configuring a MicroMDM SCEP Server
Before you begin ensure that you have an SCEP server installed. You can download and install the SCEP server from https://github.com/micromdm/scep/releases.
-
Create a new CA.
./scepserver-linux-amd64 ca -init
-
Start the SCEP server.
./scepserver-linux-amd64 -depot depot -port 2016 -challenge=secret
-
Create the mdmscep.config file with the following configuration and place it in the TFTP server where the Intelligent Node software version 4.0.0 is located.
server-url string SCEP server URL keySize int rsa key size (default 2048) challenge string enforce a challenge password Example: server-url = http://175.175.145.254:2016/scep keySize = 2048 challenge = secret