%% You should probably cite rfc9733 instead of this I-D. @techreport{ietf-anima-brski-ae-13, number = {draft-ietf-anima-brski-ae-13}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-anima-brski-ae/13/}, author = {David von Oheimb and Steffen Fries and Hendrik Brockhaus}, title = {{BRSKI-AE: Alternative Enrollment Protocols in BRSKI}}, pagetotal = 43, year = 2024, month = sep, day = 17, abstract = {This document defines enhancements to the Bootstrapping Remote Secure Key Infrastructure (BRSKI) protocol, known as BRSKI-AE (Alternative Enrollment). BRSKI-AE extends BRSKI to support certificate enrollment mechanisms instead of the originally specified use of EST. It supports certificate enrollment protocols, such as CMP, that use authenticated self-contained signed objects for certification messages, allowing for flexibility in network device onboarding scenarios. The enhancements address use cases where the existing enrollment mechanism may not be feasible or optimal, providing a framework for integrating suitable alternative enrollment protocols. This document also updates the BRSKI reference architecture to accommodate these alternative methods, ensuring secure and scalable deployment across a range of network environments.}, }