hi all we know that in CA srv 2008 , we have a new service called " Network device Enrollment Service " my question is , in past , when CA servers where for example win 2003 and NDES didn't exist , how we could obtain certificate for our devices ( ie cisco vpn servers that wanted to connect two site via L2TP tunnel ? thanks in advance

You could download and use Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services http://www.microsoft.com/download/en/details.aspx?id=2178 The Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services runs on the Windows Server 2003 family. It provides support for the SCEP protocol which allows Cisco routers and other intermediate network devices to obtain certificates. Edit: NDES is available in 2008 as well! /Hasain

You could download and use Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services http://www.microsoft.com/download/en/details.aspx?id=2178 The Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services runs on the Windows Server 2003 family. It provides support for the SCEP protocol which allows Cisco routers and other intermediate network devices to obtain certificates. Edit: NDES is available in 2008 as well! /Hasain Thank you very much Hasain for your Greate answers ;-) regards