anglais vers français Technique / Génie Ordinateurs : logiciels Simple Certificate Enrolment Protocol (SCEP)

contexte
"The known Simple Certificate Enrolment Protocol (SCEP) allows a Computing device to obtain a client certificate from a certificate authority (CA). The obtained client certificate may be further used for device authentication. However, to obtain a client certificate from a CA, a device needs to authenticate itself to the CA. the SCEP spécification (which is available as "draft-nourse-scep-22" from tools.ietf.org) supports différent authentication mechanisms. One mechanism, the so-called "challenge password" mechanism, is supported by a wide range of PKI infrastructure vendors. The challenge password mechanism requires a device to supply a password to the CA. Moreover, some vendors support only the so-called "global challenge password" mechanism, in which the same password is used by ail devices."

"It may be recognized as problematic that the global challenge password does not authenticate individual devices and can be used to obtain a certificate for any identity. Accordingly, it may be prudent to avoid exposing the global challenge password directly to devices."