Describes the EST protocol, its certificate provisioning capabilities, configuration requirements, authentication options, and configuration procedure.
Use this chapter to understand and configure Enrollment over Secure Transport (EST) for automated certificate provisioning.
EST protocol for automated certificate provisioning
Explains how Enrollment over Secure Transport uses TLS to secure certificate provisioning and automate certificate renewal for configured trustpoints.
EST protocol configuration guidelines and limitations
Provides key type, authentication, TLS validation, re-enrollment, and trustpoint guidelines for configuring EST.
Certificate types and their uses in the EST protocol
Maps certificate types and issuers to their uses during EST authentication and certificate provisioning.
Trust anchor databases and their uses in the EST protocol
Describes the trust anchor databases used to validate EST server and client certificates during enrollment and re-enrollment.
EST message types
Describes the predefined EST messages used to obtain CA certificates, enroll certificates, and renew certificates.
Configure the EST protocol
Configures EST authentication, PKI trustpoints, certificate enrollment, and certificate verification for secure automated provisioning.