java - Certificate enrollment via webserver -
we have webserver based on java , among other things manages many users , creates & manages digital certificates (both private & public keys) these.
i looking way automatically request, download , install specific digital certificate (both private & public keys) webserver (via kerberos authentication).
use case: thousands of client pcs don't yet have certificate installed have communicate server in future, should individual certificates installed without user-interaction. client pcs using windows , infrastructure based on windows server of sorts.
initial thoughts (for windows server) use group policy extent, of tools such "certutils" or "certreq" available via windows. there automatic enrollment options in these tools believe (enrollmentserverurl?) , "ask our specific webserver certificate, certificate , install it."
however, "how" alludes me.
our webserver have modified , "answer" such request, no problem. first have know actual request windows/certutil/certreq/other tools. sure windows has capability, know how this? , if so, kind of request sent webserver can "answer" via webserver? (is microsoft's "certificate enrollment web service" applicable java webserver?)
after lot of research have found out not possible windows certificate autoenrollment point external ca or webserver.
Comments
Post a Comment