The default realm SCEP endpoint is http://<ipaddress>/scep/scep. If you have multiple realms, then configure a unique SCEP endpoint (different configuration file) for each realm. In the following instructions, we use two PKI realms, ca-one and ca-two.
Copy the default configuration file in cp /etc/openxpki/scep/default.conf /etc/openxpki/scep/ca-one.conf.
Note: Name the file as ca-one.conf.
In nano /etc/openxpki/scep/ca-one.conf, change the realm value to realm=ca-one.
Create another configuration file in cp /etc/openxpki/scep/default.conf /etc/openxpki/scep/ca-two.conf.
Note: Name the file as ca-two.conf.
In nano /etc/openxpki/scep/ca-two.conf, change the realm value to realm=ca-two.
Restart the OpenXPKI service using openxpkictl restart.
If you want to differentiate between login credentials and default certificate templates for different PKI realms, then you may need advanced configuration.