RFC 7030: Enrollment over Secure Transport

This document profiles certificate enrollment for clients using Certificate Management over CMS (CMC) messages over a secure transport. This profile, called…

Read RFC 7030 on the RFC Editor

Outgoing relationships (37 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 2045: Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies
Normative reference — RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1
Normative reference — RFC 4086: Randomness Requirements for Security
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 5652: Cryptographic Message Syntax (CMS)
Normative reference — RFC 6838: Media Type Specifications and Registration Procedures
Normative reference — RFC 4346: The Transport Layer Security (TLS) Protocol Version 1.1
Normative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normative reference — RFC 2617: HTTP Authentication: Basic and Digest Access Authentication
Normative reference — RFC 5751: Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.2 Message Specification
Normative reference — RFC 2986: PKCS #10: Certification Request Syntax Specification Version 1.7
Normative reference — RFC 5077: Transport Layer Security (TLS) Session Resumption without Server-Side State
Normative reference — RFC 2633: S/MIME Version 3 Message Specification
Normative reference — RFC 6454: The Web Origin Concept
Normative reference — RFC 5272: Certificate Management over CMS (CMC)
Normative reference — RFC 5958: Asymmetric Key Packages
Normative reference — RFC 2585: Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTP
Normative reference — RFC 4210: Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)
Normative reference — RFC 5785: Defining Well-Known Uniform Resource Identifiers (URIs)
Normative reference — RFC 4108: Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages
Normative reference — RFC 5929: Channel Bindings for TLS
Normative reference — RFC 6402: Certificate Management over CMS (CMC) Updates
Normative reference — RFC 5273: Certificate Management over CMS (CMC): Transport Protocols
Normative reference — RFC 5746: Transport Layer Security (TLS) Renegotiation Indication Extension
Normative reference — RFC 5274: Certificate Management Messages over CMS (CMC): Compliance Requirements
Informative reference — RFC 2818: HTTP Over TLS
Informative reference — RFC 3394: Advanced Encryption Standard (AES) Key Wrap Algorithm
Informative reference — RFC 2985: PKCS #9: Selected Object Classes and Attribute Types Version 2.0
Informative reference — RFC 5054: Using the Secure Remote Password (SRP) Protocol for TLS Authentication
Informative reference — RFC 5967: The application/pkcs10 Media Type
Informative reference — RFC 2307: An Approach for Using LDAP as a Network Information Service
Informative reference — RFC 6403: Suite B Profile of Certificate Management over CMS

Incoming relationships (15 related RFCs)

Updated by, Normatively referenced by — RFC 8996: Deprecating TLS 1.0 and TLS 1.1
Updated by, Normatively referenced by — RFC 8951: Clarification of Enrollment over Secure Transport (EST): Transfer Encodings and ASN.1
Updated by, Normatively referenced by — RFC 9908: Clarification and Enhancement of the CSR Attributes Definition in RFC 7030
Normatively referenced by — RFC 8995: Bootstrapping Remote Secure Key Infrastructure (BRSKI)
Normatively referenced by — RFC 8994: An Autonomic Control Plane (ACP)
Normatively referenced by — RFC 8295: EST (Enrollment over Secure Transport) Extensions
Normatively referenced by — RFC 9148: EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol
Normatively referenced by — RFC 7894: Alternative Challenge Password Attributes for Enrollment over Secure Transport
Informatively referenced by — RFC 9483: Lightweight Certificate Management Protocol (CMP) Profile
Informatively referenced by — RFC 7711: PKIX over Secure HTTP (POSH)
Informatively referenced by — RFC 7107: Object Identifier Registry for the S/MIME Mail Security Working Group
Informatively referenced by — RFC 7114: Creation of a Registry for smime-type Parameter Values
Informatively referenced by — RFC 8886: Secure Device Install
Informatively referenced by — RFC 9271: Uninterruptible Power Supply (UPS) Management Protocol -- Commands and Responses
Informatively referenced by — RFC 9965: The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning