Client Certificates

[Valerie Smith <vsmith () GENESEO EDU>]

Hi all,

We're starting to issue client certificates for authentication and are
looking for best practices for certificate lifecycle management. We would
like to automate certificate issuance using SCEP with the InCommon version
of Sectigo to support authentication to WiFi. (Since our focus is on using
certificates for authentication, not encryption, we are not very concerned
about the key recovery piece).

Any tips, lessons learned, or best practices that anyone is willing to
share would be appreciated. Thanks!

Valerie Smith, CISSP (she/her)

Sr. Information Security Analyst

SUNY Geneseo

vsmith () geneseo edu

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community