3 docs tagged with "ot"

Why devices need certificates of their own, how automated certificate enrollment works in Avassa, and how SCEP, EST and ACME each serve a different part of the fleet.

How to let devices enroll and renew certificates with EST (RFC 7030): enable EST on a Strongbox TLS CA, choose between a shared secret and per-device birth certificates, renew automatically, and enroll post-quantum ML-DSA credentials.

How to let ACME clients such as certbot and Caddy enroll and renew certificates from a Strongbox TLS CA: enable ACME on the CA, hand out External Account Binding keys, and point the client at the CA's directory.