A basic configuration. SetHandler scep # ScepRACertificate /tmp/ra-cert.pem # ScepRAKey /tmp/ra-key.pem ScepSubjectRequest O ScepSubjectRequest countryName ScepSubjectRequest stateOrProvinceName ScepSubjectRequest commonName ScepSubjectCGI OU UNIQUE_ID ScepSubjectSet OU "Test Certificate" CASimpleCertificate /etc/pki/certs/ca-cert.pem CASimpleKey /etc/pki/certs/ca-key.pem CASimpleSerialRandom on CASimpleTime on CADiskCertificateSignRequestPath /etc/pki/ca/ CADiskCertificateByTransactionPath /etc/pki/ca/