Certificate generation for a network appliance

• US 8,769,291 B2
• Filed: 07/23/2007
• Issued: 07/01/2014
• Est. Priority Date: 07/23/2007
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Schneider, James P., Meyer, Luke R.
• Primary Examiner(s): Zee, Edward
• Application Number:
  US11/880,806
• Publication Number:
  US 20090031410A1
• Time in Patent Office: 2,535 Days
• Field of Search: 713/175, 713/155, 713/156, 713/191
• US Class Current: 713/175
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A method and system for generating identity certificates. The method may include receiving a user request to activate a network appliance, and causing a network appliance identifier and a transaction identifier of an activation transaction associated with the user request to be transmitted to the network appliance. A certificate signing request (CSR) and the transaction identifier may be received from the network appliance, the CSR including the network appliance identifier. A certificate may be generated for the network appliance if the activation transaction is valid.

Claims

1. A computer implemented method, comprising:

receiving from a client, by a processing device, a user request to activate a network appliance;

transmitting, by the processing device, a network appliance identifier and a transaction identifier which uniquely identifies an activation transaction associated with the user request, wherein the network appliance identifier and the transaction identifier are received by the client and by the network appliance;

receiving, by the processing device, a certificate signing request (CSR) and the transaction identifier from the network appliance, the CSR comprising the network appliance identifier; and

generating, by the processing device, a certificate for the network appliance when the activation transaction is valid.

2. The method of claim 1, wherein the user request does not specify identifying information about the network appliance, configuration information, or credential information for the network appliance.

3. The method of claim 1, wherein the certificate signing request is generated by the network appliance in response to the network appliance receiving the network appliance identifier.

4. The method of claim 1, wherein the user request comprises a network address of the network appliance.

5. A non-transitory machine-accessible storage medium including instructions that, when executed by a first machine, cause the first machine to perform operations comprising:

receiving from a client, by a first processor of the first machine, a user request to activate a network appliance;

transmitting, by the first processor, a network appliance identifier and a transaction identifier which uniquely identifies an activation transaction associated with the user request, wherein the network appliance identifier and the transaction identifier are received by the client and by the network appliance;

receiving, by the first processor, a certificate signing request (CSR) and the transaction identifier from the network appliance, the certificate signing request comprising the network appliance identifier; and

generating, by the first processor, a certificate for the network appliance when the activation transaction is valid.

6. The non-transitory machine-accessible storage medium of claim 5, wherein the user request does not specify identifying information about the network appliance, configuration information, or credential information for the network appliance.

7. The non-transitory machine-accessible storage medium of claim 5, wherein the user request comprises a network address of the network appliance.

8. The non-transitory machine-accessible storage medium of claim 5, further including instructions that, when executed by a second machine, cause the second machine to perform operations comprising:

transmitting, by a second processor of the second machine, the user request from a client to a server;

receiving, by the second processor, the network appliance identifier and the transaction identifier at the network appliance;

transmitting, by the second processor, the CSR and the transaction identifier from the network appliance to the server; and

receiving, by the second processor, the certificate from the server at the network appliance when the activation transaction is valid.

9. The non-transitory machine-accessible storage medium of claim 8, further including instructions that, when executed by the network appliance, cause the network appliance to perform operations comprising:

generating the certificate signing request by the network appliance upon receipt of the network appliance identifier.

10. An apparatus comprising:

a network interface device; and

a processing device, coupled to the network interface device, to;

receive from a client, via the network interface device, a user request to activate a network appliance,

transmit, via the network interface device, a network appliance identifier and a transaction identifier which uniquely identifies an activation transaction associated with the user request, wherein the network appliance identifier and the transaction identifier are received by the client and by the network appliance,

receive, via the network interface device, a certificate signing request (CSR) and the transaction identifier from the network appliance, the CSR comprising the network appliance identifier, and

generate a certificate for the network appliance when the activation transaction is valid.

11. The apparatus of claim 10, wherein the user request does not specify identifying information about the network appliance, configuration information, or credential information for the network appliance.

12. The apparatus of claim 10, wherein the certificate signing request is generated by the network appliance in response to the network appliance receiving the network appliance identifier.

13. The apparatus of claim 10, wherein the user request comprises a network address of the network appliance.