SCEP and 802.1x

Question

the page https://www.dell.com/support/kbdoc/en-us/000195180/best-practices-for-802-1x-wired-environments-in-wyse-management-suite states "Simple Certificate Enrollment Protocol (SCEP) can be integrated into this process..."

But what would be the alternative ? (to automatically push machine certificates)

DELL-Scott H · Answer

I am not sure I fully understand what your goal is.  Can you please describe a bit more so we can five you feedback?

lolix2 · Answer

our Network Team wants to enable 802.1x in our network architecture. As far as I understand. the Windows Teams can push machine certificates to Windows OS. the Linux Team can also push certificates to Linux OS (using Puppet agent).

Apparently we can't push certificates to ThinOS in any way , right ? Devices have to enroll themselves through SCEP protocol. What is misleading in the documentation is the "can be" . If we don't use SCEP, what is the alternative ?

DELL-Scott H · Answer

You have 2 choices.

Use a common certificate across your thin client fleet to auth using 802.1x
1. Assign the cert in a WMS policy, configure wireless
Use SCEP to dynamically pull a unique cert per device
1. Setup SCEP
2. Setup WMS Policy to retrieve certs via SCEP to your TC
3. Configure your wireless policy to use that cert for 802.1x

Hope this helps.

JQM · Answer

@DELL-Scott H​ We tried to implement SCEP with a unique certificate per device, but we were unable to log into the admin URL to fetch the password challenge automaticly. Then we get error 401. It works using single challenge password, but then it expires in 60 minutes and is not a feasible option. Do you have a detailed guide explaining how to set up SCEP using unique certificates and its requirements?

k_rind24 · Answer

@JQM​ I could help you out if you didn’t already get it working

Wyse ThinOS

SCEP and 802.1x

Was this post helpful?