Device certificate enrollment
Why devices need certificates of their own, how automated certificate enrollment works in Avassa, and how SCEP and EST each serve a different part of the fleet.
Why devices need certificates of their own, how automated certificate enrollment works in Avassa, and how SCEP and EST each serve a different part of the fleet.
How to let devices enroll and renew certificates with EST (RFC 7030): enable EST on a Strongbox TLS CA, choose between a shared secret and per-device birth certificates, renew automatically, and enroll post-quantum ML-DSA credentials.