Abstract
A mechanism is proposed herein to enable each cloud-connected forwarder to install a unique X.509 certificate using a bootstrap certificate and to automatically rotate the unique certificate before expiration. By replacing a fleet-wide shared client certificate with a unique certificate and private key for each forwarder, while automating certificate acquisition, installation, hot reload, and renewal, the mechanism reduces the security exposure associated with compromise of a shared forwarder credential.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Lu, Kevin; Nadkar, Gaurav; Chen, Yi-Hsuan; Tripathi, Muni; Mucheli, Sriharsha; and Tsang, Edward, "AUTOMATED FORWARDER BOOTSTRAP AND ROTATION FOR UNIQUE X.509 CERTIFICATES", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/12213