.. _example_system_certificate_scep_scep:

####
Scep
####


.. sidebar:: Contents

  .. contents::
    :depth: 1
    :local:

These scenarios show how to configure the protocol SCEP to
retrieve certificates from a PKI server; and then, establish
a VPN site-to-site connection between two end-points.

.. image:: scep.svg
  :width: 400

***************************
Test SCEP Credentials Ready
***************************

Description
===========

In this scenario, the credentials (X509 certificates) are
retrieved before VPN settings are configured.

Scenario
========

.. include:: scep/testscepcredentialsready

.. raw:: html

  <hr>

*******************************
Test SCEP Credentials Not Ready
*******************************

Description
===========

In this scenario, the credentials (X509 certificates) are
not available when the VPN configuration is committed.
However, once the credentials are downloaded, the VPN
tunnel is set-up automatically.

Scenario
========

.. include:: scep/testscepcredentialsnotready

.. raw:: html

  <hr>