Enabling the CMP support
The PKI Services configuration file, pkiserv.conf, contains a parameter in the CertPolicy section that enables the CMP support. By default this parameter, EnableCMP, is set to false. If the parameter is set to false or omitted from the configuration file, PKI Services rejects all CMP requests.
To enable the CMP support, find the following lines in the configuration
file:
# Enable the Certificate Management Protocol (CMP)
# T = True, CMP is enabled
# F = False, CMP is disabled (default if not specified)
#
EnableCMP=F