TRANSMITTING ENCODED DIGITAL CERTIFICATE DATA TO CERTIFICATE AUTHORITY USING MOBILE DEVICE

摘要

Techniques are disclosed for managing a digital certificate enrollment process. A certificate assistant on a server is configured to encode certificate enrollment data in a barcode graphic, such as a quick response (QR) code. A mobile phone application can then scan the barcode graphic using a camera to recover and transmit the enrollment data to a certificate authority. Doing so allows a system administrator (or other user) to complete the certificate enrollment process in cases where the server is blocked from connecting to a certificate authority (CA) directly, e.g., because the server is behind a firewall blocking any outbound network connections from being initiated.

主权项

1. A computer-implemented method for managing digital certificate enrollment data, the method comprising:
generating, by operation of one or more computer processors, a public key corresponding to a private key stored on a server, wherein the server is blocked from establishing a network connection with a certificate authority; generating at least a first encoding of the public key; and rendering a display of the first encoding of the public key for a mobile device configured to read the rendered display of the first encoding and to transmit the first encoding to the certificate authority.