Expand description
Possession challenge — client proves they already hold a trusted certificate by signing the request ID with their existing key.
This is used for:
- Certificate renewal (prove you hold the expiring cert)
- Device sub-namespace enrollment (vehicle proves it holds the fleet cert before getting an ECU cert)
- Zero-touch provisioning when a factory key is pre-installed
Structs§
- Possession
Challenge - NDNCERT possession challenge handler.