View all questions & answers for the FCP - FortiAuthenticator 6.5 Administrator Exam Materials exam


Question 4 Discussion

Which interface service must be enabled for the SCEP client to connect to FortiAuthenticator? (Choose one answer)

  • A. HTTP/HTTPS
  • B. SSH
  • C. REST API
  • D. OCSP
Correct Answer: A

Brave-Dump Clients Votes

A 100%

Comments



Juan Diego Ruiz 2025-04-15 22:22:06

Selected Answers: A


You can enable SCEP on the General page. You must enter the default CA and enrollment password. You
must also specify the enrollment method type.
Two SCEP enrollment methods are supported:
• Automatic: With this method, the administrator pre-approves the certificate first and gives the user a
challenge password. By using this password during the CSR submission, the user’s device will
immediately receive the signed certificate from the SCEP server.
• Manual and Automatic: With this method, the user submits a CSR first, the request shows up as pending
on FortiAuthenticator, and then the administrator manually approves or rejects the CSR. You must supply
the password to the administrator approving (or denying) the CSR request. With this option,
FortiAuthenticator can send an email to the administrator each time there is a CSR pending approval.
Note that when leveraging SCEP the service, you must enable HTTP and/or HTTPs administrator access on
the FortiAuthenticator interfaces that face the SCEP clients. This is also true for CRL distribution.