Markvision Enterprise
For automatic certificate requests, we are using the Signer on Behalf certificate feature of OpenXPKI.
Stop the OpenXPKI service using openxpkictl stop.
In nano /etc/openxpki/config.d/realm/ca-one/scep/generic.yaml, from the authorized_signer: section, add a rule for the subject name of the signer certificate.
rule1: # Full DN subject: CN=Markvision_.*
Notes:
Save the file.
Start the OpenXPKI service using openxpkictl start.