OPopenziti
Enroll

Allows verification of a controller or cluster of controllers as being the valid target for enrollment.

Changed on

A caller may submit a nonce and a key id (kid) from the enrollment JWKS endpoint or enrollment JWT that will be used to sign the nonce. The resulting signature may be validated with the associated public key in order to verify a networks identity during enrollment. The nonce must be a valid formatted UUID.

post/enroll/challenge

Request

Request body

keyIdstring required
noncestring uuid required

Response

A nonce challenge response. The contents will be the signature of the nonce, the key id used, and algorithm used to produce the signature.

algorithmstring required
caPoolstring required
kidstring required
signaturestring required

Example response

{
  "algorithm": "algorithm",
  "caPool": "caPool",
  "kid": "kid",
  "signature": "signature"
}

Changes