I not sure which certs I am suppose to use
openssl.exe x509 -req -days 3650 \ -in Meraki_SCEP_CA_CSR.csr -CA your_ca.crt \ -CAkey your_key.key -CAcreateserial \ -out Signed_Meraki_SCEP.crt
CA your_ca.crt - Is this my Subordinate_G1_myAD_Root_G1 or myAD_Root_G1
your_key.key - How do I get my key, export out of AD or a cert? Do I get this some ware else?
Do I need to have NDES configured in AD Cert server?
I tried to follow
How to sign certificates with a Microsoft CA - YouTube
Extensions required:
Digital Signature
Certificate Signing
But they are not listed in extensions to add
