BRSKI with Alternative Enrollment (BRSKI-AE)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 27
Abstract: This document defines enhancements to the Bootstrapping Remote Secure Key Infrastructure (BRSKI) protocol, known as BRSKI with Alternative Enrollment (BRSKI-AE). BRSKI-AE extends BRSKI to support certificate enrollment mechanisms instead of the originally specified use of Enrollment over Secure Transport (EST). It supports certificate enrollment protocols such as the Certificate Management Protocol (CMP) that use authenticated self-contained signed objects for certification messages, allowing for flexibility in network device onboarding scenarios. The enhancements address use cases where the existing enrollment mechanism may not be feasible or optimal, providing a framework for integrating suitable alternative enrollment protocols. This document also updates the BRSKI reference architecture to accommodate these alternative methods, ensuring secure and scalable deployment across a range of network environments.
Publication Date: 2025-03-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9733
Link: https://doi.org/10.17487/RFC9733
Author(s): David von Oheimb
Steffen Fries
Hendrik Brockhaus
Keyword(s): BRSKI, IoT, Zero Touch, Alternative Enrollment Protocols, CMP, Self-contained Signed Objects, End-to-end Proof of Origin, Auditable Source Authentication

Latest version of IETF RFC 9733

Document Versions — IETF RFC 9733

▶ IETF RFC 9733 (2025-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

10.1109-IEEESTD.2018.8423794 — IEEE.802.1AR_2018 EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 8174 [Active*]
IETF RFC 8995 [Active*]
IETF RFC 9483 [Active*]

Bibliographic Reference(s)

IEC.62351-9.2023 — IEC-62351-9 EXTERNAL
IETF.draft-ietf-anima-brski-discovery-05 — I-D.ietf-anima-brski-discovery EXTERNAL
IETF.draft-ietf-anima-constrained-voucher-27 — I-D.ietf-anima-constrained-voucher EXTERNAL
ISO.15118-2.2014 — ISO-IEC-15118-2 EXTERNAL
Open Charge Alliance, "Open Charge Point Protocol 2.0.1 (Draft)", December 2019. EXTERNAL
North American Electric Reliability Council, "Cyber Security - Electronic Security Perimeter", CIP 005-5, December 2013. EXTERNAL
von Oheimb, D., Ed., Fries, S., and H. Brockhaus, "Update on BRSKI-AE: Alternative Enrollment Protocols in BRSKI", IETF 116 - ANIMA Working Group Presentation, March 2023, <https://datatracker.ietf.org/meeting/116/materials/slides-116-anima-update-on-brski-ae-alternative-enrollment-protocols-in-brski-00>. EXTERNAL
UNISIG, "ERTMS/ETCS On-line Key Management FFFIS", Subset-137, Version 1.0.0, December 2015, <https://www.era.europa.eu/system/files/2023-01/sos3_index083_-_subset-137_v100.pdf>. EXTERNAL
IETF RFC 2986 [Active*]
IETF RFC 4210 [Superseded*]
IETF RFC 4211 [Active*]
IETF RFC 5272 [Superseded*]
IETF RFC 5652 [Active*]
IETF RFC 5929 [Active*]
IETF RFC 6955 [Active*]
IETF RFC 7030 [Active*]
IETF RFC 8366 [Active*]
RFC8894 — RFC8894 EXTERNAL
IETF RFC 8994 [Active*]
IETF RFC 9148 [Active*]
IETF RFC 9480 [Superseded*]
IETF RFC 9482 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9733.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9733, BRSKI with Alternative Enrollment (BRSKI-AE). Available at https://doi.org/10.17487/RFC9733

Snippet:

IETF RFC 9733, BRSKI with Alternative Enrollment (BRSKI-AE). Available at https://doi.org/10.17487/RFC9733

HTML (ISO 690 compliant)

Preview:

IETF RFC 9733, BRSKI with Alternative Enrollment (BRSKI-AE). Available at https://doi.org/10.17487/RFC9733

Snippet:

<span class="citation"><cite>IETF RFC 9733</cite>, BRSKI with Alternative Enrollment (BRSKI-AE). Available at <a href="https://doi.org/10.17487/RFC9733" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9733</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9733, BRSKI with Alternative Enrollment (BRSKI-AE)
doi: 10.17487/RFC9733
url: https://doi.org/10.17487/RFC9733

Snippet:

<li>
<cite id="bib-rfc9733">IETF RFC 9733</cite>, BRSKI with Alternative Enrollment (BRSKI-AE)
<span class="doi">10.17487/RFC9733</span>
</li>

Referenced By

IETF RFC 9810 [Active*]