Installing Microsoft Windows 2000 Certificate Services Add-on for Cisco Enrollment Protocol

The Certificate Services Add-on for Cisco Enrollment Protocol (CEP) runs on Windows 2000 Server.

This tool is not installed by the Windows 2000 Resource Kit Setup. To install it, use the following procedure:

You must install the Certificate Services Add-on for CEP on a root certification authority (CA). Both enterprise root CAs and stand-alone root CAs are supported. You can install the Certificate Services Add-on for CEP on a subordinate CA. However, as of October 1999, existing versions of Cisco routers are not able to request certificates from the subordinate CA.
The CA should be in a separate certification hierarchy from all other CAs in your organization.
You need to have proper administrative privileges to install the Certificate Services Add-on for CEP. By default, you need to be a member of the Enterprise Administrators group or the root Domain Administrators group to install this add-on on an enterprise CA, or you need to be a member of the computer administrators group to install this add-on on a standalone CA.
The Certificate Services Add-on for CEP cannot be installed on a Windows 2000 CA that has any non-alphanumeric characters (for example: &,*, :, ;, ', ") in its name.

Log on with the appropriate administrative privileges to the server on which the root CA is installed.
Click Start, click Run, then type drive:cepsetup.exe where drive is the CD-ROM drive where the Windows 2000 Resource Kit companion CD is located or the disk drive where you have downloaded cepsetup.exe. (On the Resource Kit companion CD, this file is located in the <cdroot>\Apps\Cep directory.)
In the CEP Setup wizard:

Select whether or not you want to require a challenge phrase for router certificate enrollment.
Enter information about who is enrolling for the Registration Authority (RA) certificate, which will later allow certificates to be requested from the CA on behalf of the router.
(Optional) Select Advanced Enrollment Options if you want to specify the cryptographic service provider (CSP) and key lengths for the RA signature and encryption keys.
The URL - http://URLHostName/certsrv/mscep/mscep.dll - is displayed when the CEP Setup wizard finishes and confirms a successful installation. URLHostName is the name of the server which hosts the CA's enrollment Web pages (also referred to as Certificate Services Web pages).