Certificate handling with SCEP

Diagnosis for SCEP

March 25, 2025

Contributed by:

Show client certificate in a shell

Use the following command:

openssl x509 -in /setup/cacerts/scep/client.pem -noout -text
<!--NeedCopy-->

All information about the certificate is displayed.

View log files

For the relevant OU, in the device configuration, enable enhanced logging.
Request the diagnostic files. For further information, see Requesting diagnostic files in the Scout guide.


/tmp/systemd-journal.log	Network log file
/setup/logs/scepagent.log1 temporary version under /var/log/scepagent.log	Log file of the SCEP agent, contains last certificate transfer This file is not included in the template #System, but must be defined in an individual template. For further information, see Device diagnostics in the Scout guide.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Diagnosis for SCEP

March 25, 2025

Contributed by:

March 25, 2025

Contributed by:

Diagnosis for SCEP

Show client certificate in a shell

View log files

In this article