SCEP on Panorama Error

[Claw4609]

We're testing SCEP on Panorama and getting an error saying "Unable to generate SCEP certificate, Certificate CA Retrieval Failed". Doing a tcpdumb nothing immediately sticks out, there is not untrusted CA error or anything like that. Is there any indication of what to look for to address this? System logs basically just say sslmgr SCEP certificate failed. 

In sslmgr logs I am seeing:  Failed to handle op command for agent

[akuzhuppilly · Accepted solution]

Hello @Claw4609 

The message in the screenshot indicates that certificate generation failed while trying to generate on the Firewall/Panorama using the SCEP profile. This could occur if 'Anonymous Authentication' is disabled in Windows Server IIS Manager. Enable it and check the status.