PKI supports Simple Certificate Enrollment Protocol (SCEP). This enables Cisco Routers and VPN Clients and other products to get certificates, which they use for IPSec.

The protocol is defined in RFC 8894.