pkcs7 unwrap error when using scep

Hello Abdelkrim,

I hope you are doing well :)!

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Hello Abdelkrim,

We are still looking for someone to help you.

We will come back to you ASAP.

Thanks,

Is the enrollment set to automatic or manual and does it include the necessary options in 'Advanced Options: Key Usages'?

Thanks Anthony and Emirjon

The enrollment is "Manual and Automatic". I also tested "Automatic" but didn't help.

I didn't touch the options under Key Usages, I just left them with their default values.

I think the issue is not from FAC side because as mentioned above the same SCEP config worked well with my FGT.

SCEP is much more secure, because the private key is generated on the device. On Windows devices that would be the TPM, on iOS in the Secure Enclave. It never leaves the device. With PKCS the private key goes around a lot more.

Hi Emirjon

Following more tests I could make it work with FWB but only after I manually create the enrollment on FAC. While for FGT the enrollment is automatically created on FAC.

When I try from FWB I get the following error is seen on FAC.

Message      SCEP PKCSReq: error creating a new manual enrollment request

Enrollment method is set to "Manual and Auto".