Device certificate enrollment
Why devices need certificates of their own, how automated certificate enrollment works in Avassa, and how SCEP and EST each serve a different part of the fleet.
Why devices need certificates of their own, how automated certificate enrollment works in Avassa, and how SCEP and EST each serve a different part of the fleet.
How to let devices enroll and renew certificates with EST (RFC 7030): enable EST on a Strongbox TLS CA, choose between a shared secret and per-device birth certificates, renew automatically, and enroll post-quantum ML-DSA credentials.
How the pieces of the Avassa PKI fit together: certificate authorities, issuance and enrollment, revocation, expiry monitoring, rollover, and where each part runs.
Learn how to enable SCEP certificate enrollment for TLS CAs so that network devices and MDM-managed endpoints can automatically obtain certificates.