[Anima] I-D Action: draft-ietf-anima-bootstrapping-keyinfra-25.txt
internet-drafts@ietf.org Mon, 12 August 2019 22:29 UTC
Return-Path: <internet-drafts@ietf.org>
X-Original-To: anima@ietf.org
Delivered-To: anima@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B9BA121031; Mon, 12 Aug 2019 15:29:07 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Cc: anima@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.100.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: anima@ietf.org
Message-ID: <156564894715.20500.6966844154171253366@ietfa.amsl.com>
Date: Mon, 12 Aug 2019 15:29:07 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/W9hhkW5boEfiUAXQfmIUKYke6XM>
Subject: [Anima] I-D Action: draft-ietf-anima-bootstrapping-keyinfra-25.txt
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Aug 2019 22:29:07 -0000
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Autonomic Networking Integrated Model and Approach WG of the IETF.
Title : Bootstrapping Remote Secure Key Infrastructures (BRSKI)
Authors : Max Pritikin
Michael C. Richardson
Toerless Eckert
Michael H. Behringer
Kent Watsen
Filename : draft-ietf-anima-bootstrapping-keyinfra-25.txt
Pages : 107
Date : 2019-08-12
Abstract:
This document specifies automated bootstrapping of an Autonomic
Control Plane. To do this a Remote Secure Key Infrastructure (BRSKI)
is created using manufacturer installed X.509 certificates, in
combination with a manufacturer's authorizing service, both online
and offline. Bootstrapping a new device can occur using a routable
address and a cloud service, or using only link-local connectivity,
or on limited/disconnected networks. Support for lower security
models, including devices with minimal identity, is described for
legacy reasons but not encouraged. Bootstrapping to is complete when
the cryptographic identity of the new key infrastructure is
successfully deployed to the device. The established secure
connection can be used to deploy a locally issued certificate to the
device as well.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-anima-bootstrapping-keyinfra/
There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-anima-bootstrapping-keyinfra-25
https://datatracker.ietf.org/doc/html/draft-ietf-anima-bootstrapping-keyinfra-25
A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-anima-bootstrapping-keyinfra-25
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
- [Anima] I-D Action: draft-ietf-anima-bootstrappin… internet-drafts