RFC9733 · BRSKI with Alternative Enrollment (BRSKI-AE)

{
  "id": "RFC9733",
  "number": 9733,
  "title_en": "BRSKI with Alternative Enrollment (BRSKI-AE)",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document defines enhancements to the Bootstrapping Remote Secure Key Infrastructure (BRSKI) protocol, known as BRSKI with Alternative Enrollment (BRSKI-AE). BRSKI-AE extends BRSKI to support certificate enrollment mechanisms instead of the originally specified use of Enrollment over Secure Transport (EST). It supports certificate enrollment protocols such as the Certificate Management Protocol (CMP) that use authenticated self-contained signed objects for certification messages, allowing for flexibility in network device onboarding scenarios. The enhancements address use cases where the existing enrollment mechanism may not be feasible or optimal, providing a framework for integrating suitable alternative enrollment protocols. This document also updates the BRSKI reference architecture to accommodate these alternative methods, ensuring secure and scalable deployment across a range of network environments.",
  "authors": [
    "D. von Oheimb",
    "S. Fries",
    "H. Brockhaus"
  ],
  "organizations": [],
  "publication_date": "2025-03-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "ops",
  "area_ru": "Эксплуатация и управление",
  "working_group": "anima",
  "source_draft": "draft-ietf-anima-brski-ae-13",
  "page_count": 27,
  "doi": "10.17487/RFC9733",
  "keywords": [
    "BRSKI",
    "IoT",
    "zero-touch onboarding",
    "alternative enrollment protocols",
    "CMP",
    "self-contained signed objects",
    "end-to-end proof of origin",
    "auditable source authentication"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9733/",
    "html": "https://www.rfc-editor.org/rfc/rfc9733.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9733.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9733/"
  }
}