Welcome!

Welcome to the official BlackBerry Support Community Forums.

This is your resource to discuss support topics with your peers, and learn from each other.

inside custom component

BlackBerry® Enterprise Service 10

Reply
Trusted Contributor
Hape
Posts: 146
Registered: ‎08-18-2010
My Device: Z10

Questions about a SCEP profile

Hello together,

 

we are running BDS and and using a couple of Z10 devices.

I was able to activate the devices via BDS by using the Certificate share folder.

 

But I would like to configure SCEP profile to use the auto enrollment features.

 

In the current set up:

If the Root certificate exipires after a fix period I have to replace the certificates on the shared folder manualy.

 

But as far as I understood, with the SCEP service, a new root certificate will be requested and deployed automatically to all devices.  Is this true?

 

Or do I need to reconfigure the SCEP profile if a new root certificate is available.

 

I just want to avoid any manual activities(of course if possible) if a new root certificate is available. 

Can a SCEP-Profil do this fully automated?

 

Thanks and regards,

hape

 

Please use plain text.
New Contributor
marsax
Posts: 3
Registered: ‎03-25-2013
My Device: Z10

Re: Questions about a SCEP profile

[ Edited ]

Hi

I can't help you with SCEP. But perhaps you can help me :-)

 

I try to use my Z10 with a user certificate to authenticate with the Exchange. I have a BDS 6.2 and my Z10 is activated and the ActiveSync profile is on my Z10, but I have always to put in a password to synchronize my email etc.  My user certificate is also on my Z10. I imported it via PC-USB-Share folder. 

The Exchange is configured to accept only certificates and no basic authentication.

 

I don't understand how I can tell my Z10 to use the certificate instead of a password....

 

Can you tell me how you did it?

 

P.S.

Sorry if I hijack your post. You may delete or ignore my question if you don't like it....

 

Thanks

Martin

Please use plain text.
Trusted Contributor
Hape
Posts: 146
Registered: ‎08-18-2010
My Device: Z10

Re: Questions about a SCEP profile

[ Edited ]

Hi marsax,

 

never mind about hijacking :-)

I am not sure if this helps, but try to deploy the certificate via shared folder to the device (Not manual USB copy).

Perhaps this could help to solve your issue.

 

Regards,

Hape

 

 

Please use plain text.
Retired
FrankieS
Posts: 2,795
Registered: ‎05-10-2010
My Device: BlackBerry Z10 smartphone

Re: Questions about a SCEP profile

Hi Hape,

Thanks for the question.

The SCEP component monitors the expiry date and revocation status of any certificate obtained using SCEP. When the expiry date approaches, the SCEP component starts the certificate enrollment process for a new certificate.  You can use the Automatic Renewal SCEP profile setting to configure how many days before the certificate expires automatic renewal will occur.

 

You can find more information on this in the Administration Guide, specifically starting on page 86. The guide can be located here: http://blck.by/13B9UfW

Let me know if that helps.


-FS


 


Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp


Be sure to click Kudos! for those who have helped you.

Click Solution? for posts that have solved your issue(s)!



Please use plain text.
Contributor
godik
Posts: 13
Registered: ‎04-08-2013
My Device: BES10 and Z10

Re: Questions about a SCEP profile

@marsax

 

Do you have any news on this ?

With Cert only it is also not working for me.

Please use plain text.
New Contributor
marsax
Posts: 3
Registered: ‎03-25-2013
My Device: Z10

Re: Questions about a SCEP profile

Hi godik,
It still doesn't work. But I red i anther thread in this forum (I can't find it now..) it should work only together with SCEP. Only if the certificate is associated to the user/Z10 by the SCEP profile the connection to Exchange can be autheticated with the cert...
I'm still working on SCEP... :-(
Please use plain text.
Contributor
Romax
Posts: 24
Registered: ‎08-08-2013
My Device: Z10

Re: Questions about a SCEP profile

@Marsax,

Did you manage ot get it to work?
I am experiencing issues with SCEP as well right now.

Please use plain text.