Deploying certificates without direct connection to NDES/SCEP server. Using UMS/ICG as a kind of proxy.
We already have the discussion to make the UMS to a kind of CA / Sub-CA. That would fit into that topic! Thanks, noted!
Proxying SCEP requests for at least ICG connected devices would be a good idea. We use machine certs from our internal CA for network access control. If the IGEL moves to the home office it has no chance tto refresh his expired machine cert and may need some additional configuration after returning to our internal network.
would be very interesting for us too. hopefully coming soon.
Push ;)
We have passed this feedback to PM. They are evaluating it. I can’t promise it will get implemented sonish but at least they are looking at it!
@Perusat Can you update us on this topic?
Any updates?
Any updates to this? Security is a big deal for everyone these days.
Unfortunately, only that it is on Backlog. I know this topic is crucial for you guys, let me try my best to get it pushed even more.
Any updates?
This feature would be really great to have. Large companies are locking down systems for security reasons and the need to have a functioning certificate system within the igel infrastructure is becoming critical for more than just one person here.
UMS as CA Proxy was already released with UMS 12.09.100 for EST. For SCEP it is currently in development. We plan to release this within the next major version. Appreciate your feedback!