Assisted certificate enrollment

摘要

A certificate enrollment assistant module may be provided to inject a challenge password into a certificate signing request to be sent, to a Certificate Authority, from a computing device. The certificate enrollment assistant module, thereby, acts as a trusted proxy to assist the computing device in building a valid certificate signing request without the computing device having access to the challenge password.

主权项

1. A method of assisting a computing device to request a certificate, said method comprising:
receiving, from a computing device, a certificate signing request; amending said certificate signing request to include a challenge password to produce a password-carrying certificate signing request; determining a hash of said password-carrying certificate signing request; transmitting said hash to said computing device; receiving, from said computing device, said certificate signing request and a signature; amending said certificate signing request to include a challenge password to produce a signed, password-carrying certificate signing request; encrypting said signed, password-carrying certificate signing request to produce an encrypted signed, password-carrying certificate signing request; and transmitting, to said computing device, said encrypted, signed, password-carrying certificate signing request.