cancel
apaloka Top Student
Top Student
7 6 0 0
Message 1 of 8
318
Flag Post
HP Recommended

ThinPro OS - SCEP Client

T530

Hello all, I continually receive the below error when trying to request a certificate through SCEP manager on the thin client.

 

HP DM is version 4.7 SP10

HP T530 is OS version T7x70015

 

2019-05-15 11:19:47 ErrorCode: 30720, Error Info: ../../Task/common/TaskScep.cpp@89: The ThinPro SCEP component probably only supports 1024 key length. ../../Task/common/TaskScep.cpp@88: Wed May 15 11:19:24 EDT 2019 SCEP enroll result: SCEP Client configuration error

 

Communication goes through fine, NDES supports 2048. SCEP Component should support higher than 1024, so not sure why this error shows. 

7 REPLIES 7
apaloka Top Student
Top Student
7 6 0 0
Message 2 of 8
230
Flag Post
HP Recommended

ThinPro OS - SCEP Client

Updating for visibility...

Reply
0 Kudos
Teacher Teacher
Teacher
43 42 3 14
Message 3 of 8
195
Flag Post
HP Recommended

ThinPro OS - SCEP Client

You might need to update ThinPro image or the SCEP component on it to get the support for key length above 1024.

I am an HPI Employee.
My opinions are my own and do not express those of HPI.
**Click the Thumbs Up Button below to say Thanks**
Reply
0 Kudos
Teacher Teacher
Teacher
43 42 3 14
Message 4 of 8
194
Flag Post
HP Recommended

ThinPro OS - SCEP Client

And this error info can mean something else.  Please verify the parameters including the URL and challenge code on a sample thin client before sending a task.

I am an HPI Employee.
My opinions are my own and do not express those of HPI.
**Click the Thumbs Up Button below to say Thanks**
Reply
0 Kudos
apaloka Top Student
Top Student
7 6 0 0
Message 5 of 8
159
Flag Post
HP Recommended

ThinPro OS - SCEP Client

All of my thin clients are sample thin clients at this point, SCEP is not working with:

 

ThinPro OS T7X710015, T7X710018

SCEP 1024, 2048

HPDM 4.7 SP9, SP10 or 5.0

Reply
0 Kudos
Teacher Teacher
Teacher
43 42 3 14
Message 6 of 8
147
Flag Post
HP Recommended

ThinPro OS - SCEP Client

Please take one thin client and try locally with the SCEP component to verify the configuration works before sending via an HPDM task.

I am an HPI Employee.
My opinions are my own and do not express those of HPI.
**Click the Thumbs Up Button below to say Thanks**
Reply
0 Kudos
apaloka Top Student
Top Student
7 6 0 0
Message 7 of 8
124
Flag Post
HP Recommended

ThinPro OS - SCEP Client

Sorry for not clarifying, I've done that as well. I usually try both

Reply
0 Kudos
Teacher Teacher
Teacher
43 42 3 14
Message 8 of 8
93
Flag Post
HP Recommended

ThinPro OS - SCEP Client

1. Please confirm what status do you see on a thin client when trying to enroll.  You can find it at the bottom of the dialog of SCEP Manager as shown in the attached picture with the red box.  I guess it can be the same as what you see in the task log: 

SCEP Client configuration error

2. With NDES there is more than one URL during preparation.  Please refer to the whitepaper WP_SCEP-Tutorial_HPDM-4.7.pdf and make sure the URL is the one to enroll.  It can be like http://NDES-address/certsrv/mscep/

I am an HPI Employee.
My opinions are my own and do not express those of HPI.
**Click the Thumbs Up Button below to say Thanks**
Reply
0 Kudos
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation