RA Mode

  1. Configure the CA in AppViewX.
  2. Generate a server certificate for the configured CA, which can be used as an RA certificate.
  3. Download the P12 file for the generated RA certificate and place it in the properties folder.
  4. Configure the name and password for the P12 file in the avx-scep-agent.properties file. SCEP_P12_FILE=<Name of the P12 file>
    For example: SCEP_P12_FILE=AvX.SCEP.Agent.appviewx.com_197.p12
  5. Encrypt the P12 file password using CryptUtil.ja as follows:
    • [appviewx@cert-dev-26 properties]$ ../jre/bin/java -jar CryptUtil.jar encrypt <Password to be encrypted>
    • RA_P12_ENCRYPTED_PASSWORD = <Provide Encrypted Value>

      For example, encrypted value = osfkIKwEzPA4/x4pCXNsiQ==

    • RA_P12_PASSWORD_DECRYPTION_KEY = <Provide Encrypted Key>

      For example, encrypted key = t9r8o297u54zp0edre6imyg04

  6. Restart the SCEP agent by executing the following command: avx --restart plugins avx_vendor_cert_scep_agent