IETF Standardizes Device Attestation ACME Challenge

The IETF is standardizing a new ACME challenge, device-attest-01, which lets organizations provision device-bound certificates that cannot be extracted from their intended machines. A new Linux tool suite called attezt implements the challenge, providing an ACME client, an attestation server with inventory support, and a PKCS11 agent. A talk will introduce the challenge and explain how attestation servers and attezt work.