Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 32
Abstract: This document extends the input to the "get-bootstrapping-data" RPC defined in RFC 8572 to include an optional certificate signing request (CSR), enabling a bootstrapping device to additionally obtain an identity certificate (e.g., a Local Device Identifier (LDevID) from IEEE 802.1AR) as part of the "onboarding information" response provided in the RPC-reply.
Publication Date: 2024-10-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9646
Link: https://doi.org/10.17487/RFC9646
Author(s): Kent Watsen
Russ Housley
Sean Turner
Keyword(s): Zero Touch, Booting, CSR, PKCS-10, CMC, CMP

Latest version of IETF RFC 9646

Document Versions — IETF RFC 9646

▶ IETF RFC 9646 (2024-10-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2986 [Active*]
IETF RFC 3688 [Active*]
IETF RFC 4210 [Superseded*]
IETF RFC 5272 [Superseded*]
IETF RFC 6020 [Active*]
IETF RFC 7950 [Active, Amended*]
IETF RFC 8040 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8446 [Superseded*]
IETF RFC 8572 [Active*]
IETF RFC 8791 [Active*]
IETF RFC 9110 [Active*]
IETF RFC 9640 [Active*]
T-REC-X.690.2021 — X690 EXTERNAL

Bibliographic Reference(s)

IEEE.STD802.1AR.2018 — Std-802.1AR-2018 EXTERNAL
ISO.20543.2019 — ISO.20543-2019 EXTERNAL
NIST.SP.800-90Ar1 — SP80090A EXTERNAL
Heninger, N., Durumeric, Z., Wustrow, E., and J. Halderman, "Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices", Security'12: Proceedings of the 21st USENIX Conference on Security Symposium, August 2012, <https://www.usenix.org/conference/usenixsecurity12/technical-sessions/presentation/heninger>. EXTERNAL
National Institute of Science and Technology (NIST), "National Vulnerability Database - CVE-2008-0166 Detail", May 2008, <https://nvd.nist.gov/vuln/detail/CVE-2008-0166>. EXTERNAL
Killmann, W. and W. Schindler, "A proposal for: Functionality classes for random number generators - Version 2.0", September 2011, <https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Interpretationen/AIS_31_Functionality_classes_for_random_number_generators_e.pdf>. EXTERNAL
IETF RFC 4086 [Active*]
IETF RFC 7292 [Active*]
IETF RFC 8340 [Active*]
IETF RFC 8407 [Superseded*]
IETF RFC 8792 [Active*]
IETF RFC 8808 [Active*]
IETF RFC 9641 [Active*]
IETF RFC 9642 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9646.json

Amends:

IETF RFC 8572 [Active*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9646, Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request. Available at https://doi.org/10.17487/RFC9646

Snippet:

IETF RFC 9646, Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request. Available at https://doi.org/10.17487/RFC9646

HTML (ISO 690 compliant)

Preview:

IETF RFC 9646, Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request. Available at https://doi.org/10.17487/RFC9646

Snippet:

<span class="citation"><cite>IETF RFC 9646</cite>, Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request. Available at <a href="https://doi.org/10.17487/RFC9646" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9646</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9646, Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request
doi: 10.17487/RFC9646
url: https://doi.org/10.17487/RFC9646

Snippet:

<li>
<cite id="bib-rfc9646">IETF RFC 9646</cite>, Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request
<span class="doi">10.17487/RFC9646</span>
</li>