Simple Certificate Enrollment Protocol (SCEP)
Created
- 2020-03-25
Last Updated
- 2020-11-06
Available Formats
SCEP Message Types
Registration Procedure(s)
- Specification Required
Expert(s)
- Peter Gutmann
Reference
- RFC 8894: Simple Certificate Enrolment Protocol
Available Formats
| Value | Name | Description | Reference |
|---|---|---|---|
| 0 | Reserved | RFC 8894 | |
| 1-2 | Unassigned | ||
| 3 | CertRep | Response to certificate or CRL request. | RFC 8894 |
| 4-16 | Unassigned | ||
| 17 | RenewalReq | PKCS #10 certificate request authenticated with an existing certificate. | RFC 8894 |
| 18 | Unassigned | ||
| 19 | PKCSReq | PKCS #10 certificate request authenticated with a shared secret. | RFC 8894 |
| 20 | CertPoll | Certificate polling in manual enrolment. | RFC 8894 |
| 21 | GetCert | Retrieve a certificate. | RFC 8894 |
| 22 | GetCRL | Retrieve a CRL. | RFC 8894 |
| 23-255 | Unassigned |
SCEP CA Capabilities
Registration Procedure(s)
- IETF Review
Reference
- RFC 8894: Simple Certificate Enrolment Protocol
Available Formats
| Keyword | Description | Reference |
|---|---|---|
| AES | CA supports the AES128-CBC encryption algorithm. | RFC 8894 |
| DES3 | CA supports the triple DES-CBC encryption algorithm. | RFC 8894 |
| GetNextCACert | CA supports the GetNextCACert message. | RFC 8894 |
| POSTPKIOperation | CA supports PKIOPeration messages sent via HTTP POST. | RFC 8894 |
| Renewal | CA supports the Renewal CA operation. | RFC 8894 |
| SHA-1 | CA supports the SHA-1 hashing algorithm. | RFC 8894 |
| SHA-256 | CA supports the SHA-256 hashing algorithm. | RFC 8894 |
| SHA-512 | CA supports the SHA-512 hashing algorithm. | RFC 8894 |
| SCEPStandard | CA supports all mandatory-to-implement sections of the SCEP standard. This keyword implies "AES", "POSTPKIOperation", and "SHA-256", as well as the provisions of Section 2.9 of RFC 8894. | RFC 8894 |