Hi,

Is there a windows client to test the implementation of a NDES service? Is there a way that we can use certreq command to issue a certificate by calling to NDES service?

Thank you.

You can test it with an iPhone or iPad if you use the Apple iPhone Configuration Utility: http://blogs.technet.com/b/askds/archive/2010/11/22/ipad-iphone-certificate-issuance.aspx

Cheers

JJ

Hi Musclecar77,

I'm am wondering the exact same thing.  I have an iPad that I can get an SCEP (ie. NDES) certificate installed on without issue as long as my NDES site (http://caserver/certsrv/mscep/mscep.dll) is running as HTTP.  When I change that to HTTPS, the iPad fails to get the profile with just a plain old "Network error" message.  I would like to have some means of testing this without the iPad.  There must be a client or command for this without having to use an actual non-windows appliance.  If you find one, please let me know.  In the meantime, I'm continuing to search and if I get one, I'll send the info along.

Cheers

The error is most likely due to using a private CA -issued SSL certificate. In my experience, the certificate must be issued by a commercial CA

Brian

I'd be surprise if a private CA issued cert could not be used.  To me, that would not make any sense that you would have to use a commercial cert to secure a website on a internal CA server, but I guess anything is possible.  The strange thing is that I can access the https://caserver/certsrv/mscep_admin page from the iPad without error.  I'm curious as to what would make the https://caserver/certsrv/mscep/mscep.dll site any different?

Cheers

Hi zeetwoeight,

I still did not find any windows client. But you can also try this linux client. http://www.klake.org/~jt/sscep/ . I used in on RHEL 5.5. Works fine.

You might need information on this link if you are configuring it.

Thanks

Hi,

I know this has been a few years since a bump, but I stumbled upon this post. Worked fine in my labs. 

http://secadmins.com/index.php/ndes-scep-windows-test-tool/

Matt