{"id":40879,"date":"2024-03-28T05:16:01","date_gmt":"2024-03-28T04:16:01","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/scep\/"},"modified":"2024-12-04T05:03:58","modified_gmt":"2024-12-04T04:03:58","slug":"scep","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/lt\/knowledgebase\/configuration-windows-10-pc\/general\/security-management\/certificate-management\/scep\/","title":{"rendered":"SCEP"},"content":{"rendered":"\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Redaguoti<\/a><\/caption>\n
\n

Apra\u0161ymas<\/p>\n <\/td>

\n

SCEP serverio apra\u0161ymas<\/p>\n <\/td>\n<\/tr>\n

\n

Diegimo sritis<\/p>\n <\/td>

\n

Sertifikato diegimo sritis: Dabartinis \u012frenginys ir naudotojas<\/p>\n <\/td>\n<\/tr>\n

\n

SCEP serverio URL adresai<\/p>\n <\/td>

\n

Vienas ar daugiau serveri\u0173, i\u0161duodan\u010di\u0173 sertifikatus per SCEP<\/p>\n <\/td>\n<\/tr>\n

\n

Tema<\/p>\n <\/td>

\n

X.500 pavadinimo atvaizdavimas. Pvz., „C=US, O=Microsoft Corporation, CN=foo, 1.2.5.3=bar”. <\/p>\n <\/td>\n<\/tr>\n

\n

Alternatyv\u016bs dalyko pavadinimai<\/p>\n <\/td>

\n

Tipas<\/p>\n <\/td>

\n

El. pa\u0161to adresas<\/p>\n <\/td>\n<\/tr>\n

\n

DNS<\/p>\n <\/td>\n<\/tr>\n

\n

URI<\/p>\n <\/td>\n<\/tr>\n

\n

Vartotojo pagrindinis vardas (UPN)<\/p>\n <\/td>\n<\/tr>\n

\n

CA pir\u0161t\u0173 atspaudai<\/p>\n <\/td>

\n

Sertifikato institucijos sertifikato SHA1 pir\u0161t\u0173 atspaudas. E.g. 31:8F:1E:78:5C:D5:12:9F:7E:3B:AD:F3:1C:C0:19:03:96:43:A9:E5 <\/p>\n <\/td>\n<\/tr>\n

\n

Galiojimo laikotarpis vienetai<\/p>\n <\/td>

\n

Dienos, m\u0117nesiai arba metai<\/p>\n <\/td>\n<\/tr>\n

\n

Galiojimo laikotarpis<\/p>\n <\/td>

<\/td><\/td><\/td><\/td>\n<\/tr>\n
\n

I\u0161\u0161\u016bkis<\/p>\n <\/td>

\n

Naudojamas kaip i\u0161 anksto suteikta paslaptis automatiniam registravimui<\/p>\n <\/td>\n<\/tr>\n

\n

Pakartotiniai bandymai<\/p>\n <\/td>

\n

Kiek kart\u0173 \u012frenginys tur\u0117t\u0173 bandyti pakartotinai, jei serveris siun\u010dia atsakym\u0105 PENDING. Numatytoji reik\u0161m\u0117 yra 5. Did\u017eiausia reik\u0161m\u0117 – 30. <\/p>\n <\/td>\n<\/tr>\n

\n

Pakartojimo v\u0117lavimas<\/p>\n <\/td>

\n

Minu\u010di\u0173, kurias reikia laukti prie\u0161 pakartotin\u012f bandym\u0105, skai\u010dius. Numatytoji reik\u0161m\u0117 yra 5. Ma\u017eiausia reik\u0161m\u0117 yra 1. <\/p>\n <\/td>\n<\/tr>\n

\n

Rakto dydis<\/p>\n <\/td>

\n

Rakto dydis bitais<\/p>\n <\/td>\n<\/tr>\n

\n

„Hash” algoritmas<\/p>\n <\/td>

\n

\u0160ifravimo algoritm\u0173 \u0161eima<\/p>\n <\/td>\n<\/tr>\n

\n

Pagrindinis naudojimas<\/p>\n <\/td>

\n

Rakto naudojimo pl\u0117tinys apibr\u0117\u017eia sertifikate esan\u010dio rakto paskirt\u012f (pvz., \u0161ifravimas, pasira\u0161ymas). Reikia pasirinkti bent vien\u0105 i\u0161 „Digital signature” (skaitmeninis para\u0161as) arba „Key encipherment” (rakto \u0161ifravimas). <\/p>\n <\/td>\n<\/tr>\n

\n

I\u0161pl\u0117stinis rakto naudojimas<\/p>\n <\/td>

\n

Nurodo i\u0161pl\u0117stinio rakto naudojimo b\u016bdus.Priklauso nuo SCEP serverio konfig\u016bracijos. Nurodykite atitinkam\u0173 OID s\u0105ra\u0161\u0105, pvz., 1.3.6.1.5.5.7.3.3.2 (Kliento autenti\u0161kumo patvirtinimas). <\/p>\n <\/td>\n<\/tr>\n

\n

Pagrindin\u0117 vieta<\/p>\n <\/td>

\n

Rakt\u0173 saugyklos teik\u0117jas, \u012f kur\u012f turi b\u016bti \u012fdiegtas privatus raktas.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM. Nepavyksta, jei TPM n\u0117ra <\/p>\n <\/td>\n<\/tr>\n

\n

TPM. Jei TPM n\u0117ra, gr\u012f\u017etama prie programin\u0117s \u012frangos KSP <\/p>\n <\/td>

<\/td>\n<\/tr>\n
\n

Programin\u0117s \u012frangos rakt\u0173 saugyklos teik\u0117jas<\/p>\n <\/td>

<\/td>\n<\/tr>\n
\n

„Windows Hello” verslui<\/p>\n <\/td>

\n

Konteinerio pavadinimas<\/p>\n <\/td>

\n

Nurodomas „Windows Hello for Business” (anks\u010diau vadinto „Microsoft Passport for Work”) konteinerio pavadinimas.<\/p>\n <\/td>

<\/td>\n<\/tr>\n
\n

PIN raginimo tekstas<\/p>\n <\/td>

\n

Nurodo pasirinktin\u012f tekst\u0105, kuris bus rodomas „Windows Hello for Business” PIN paraginime sertifikato registravimo metu.<\/p>\n <\/td>

<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n
<\/div>\n","protected":false},"parent":40882,"menu_order":0,"template":"","class_list":["post-40879","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/lt\/wp-json\/wp\/v2\/knowledgebase\/40879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/lt\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/lt\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":2,"href":"https:\/\/kb.apptec360.com\/manual\/lt\/wp-json\/wp\/v2\/knowledgebase\/40879\/revisions"}],"predecessor-version":[{"id":42870,"href":"https:\/\/kb.apptec360.com\/manual\/lt\/wp-json\/wp\/v2\/knowledgebase\/40879\/revisions\/42870"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/lt\/wp-json\/wp\/v2\/knowledgebase\/40882"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/lt\/wp-json\/wp\/v2\/media?parent=40879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}