CMPv2 clients must use one of the following URLs to communicate with Certificate Enrollment Gateway:

The http URL only works if you configured the CMPv2 Service to allow HTTP connections.

https://<CEG-server>/cmpv2/<tenant-ID>/<CA-ID>/<profile-ID>/<spec-id>
http://<CEG-server>/cmpv2/<tenant-ID>/<CA-ID>/<profile-ID>/<spec-id>

Where:

  • <CEG-server> is the hostname or IP address of the Certificate Enrollment Gateway server.
  • <tenant-ID> is the unique identifier of a tenant defined in Certificate Enrollment Gateway. The value is case-sensitive.
  • <CA-ID> is the CA ID of the Certification Authority (CA) defined in CA Gateway that will issue certificates to the CMPv2 client.
  • <profile-ID> is the profile ID defined in CA Gateway that defines the certificate type issued to the CMPv2 client.
  • <spec-id> is a specification ID for CMPv2 that is defined in CA Gateway.

For example:

https://cegserver.example.com/cmpv2/tenant1/example_ca1/example-profile1/standard
http://cegserver.example.com/cmpv2/tenant1/example_ca1/example-profile1/standard