Automated certificate provisioning for non-domain-joined entities

1. A method comprising:

employing a processor that executes instructions defined in, stored in and retained in a computer-memory, the instructions when executed by the processor implement at least the following operations:

receiving a request from a non-domain-joined client entity for a certificate to be issued by a Certificate Authority;

distinguishing between a request for a renewal of a certificate previously issued by the Certificate Authority and a request for a new certificate where no certificate was previously issued by the Certificate Authority, and based on the distinguishing:

verifying, when the request is for a renewal a certificate previously issued by the Certificate Authority, authenticity of the certificate previously issued certificate in a nearly expired condition; or

verifying, when the request is for a new certificate, an identity of the non-domain-joined client entity through a pre-shared secret provided by the non-domain-joined client entity or through an automated process, the automated process comprising accepting security identity information from the non-domain-joined client, the security identity information including a certificate previously issued by the Certificate Authority or a certificate issued by a different trusted Certificate Authority;

sending a request to a Certificate Authority to issue a certificate to the non-domain-joined client entity;

receiving the certificate from the Certificate Authority; and

providing the certificate to the non-domain-joined client entity.

2. A method as recited in claim 1 , wherein receiving the request from the non-domain-joined client, verifying the identity of the non-domain-joined client entity, sending the request to the Certificate Authority and receiving the certificate are performed using a certificate provisioning portal.

3. A method as recited in claim 2 , further comprising loading a plug-in on the certificate provisioning portal for communicating with the Certificate Authority.

4. The method of claim 2 , wherein a plug-in is loaded on the Certificate Authority for communicating with the certificate provisioning portal.

5. A method as recited in claim 1 , further comprising associating a level of security to the issued certificate based on a predetermined trustworthiness of the security identity information.

6. A method as recited in claim 1 , further comprising storing information relating to:

verifying the identity of the non-domain-joined client entity, and receiving the certificate from the Certificate Authority.

7. One or more computer-readable storage media device having computer-readable instructions defined, stored and retained thereon that, when executed by a computer, cause the computer to perform acts comprising:

receiving a request from a non-domain-joined client entity for a certificate from a Certificate Authority;

distinguishing between a request for a renewal of a certificate previously issued by the Certificate Authority and a request for a new certificate where no certificate was previously issued by the Certificate Authority, and based on the distinguishing:

verifying, when the request is for a renewal a certificate previously issued by the Certificate Authority, authenticity of the certificate previously issued certificate in a nearly expired condition; or

verifying, when the request is for a new certificate, the identity of the non-domain-joined client entity based on security identity information provided by the non-domain-joined client entity consisting of a pre-shared secret, user credentials, a certificate previously issued by the Certificate Authority, or a certificate issued by a different but trusted Certificate Authority;

sending the request to the Certificate Authority to issue a certificate to the non-domain-joined client entity;

receiving the certificate issued from the Certificate Authority; and

sending the certificate to the non-domain-joined client entity.

8. The one or more computer-readable storage media as recited in claim 7 , wherein the computer-readable instructions, when executed by a computer, cause the computer to store information related to the certificate request and to the issuance of the certificate.

9. The one or more computer-readable storage media as recited in claim 7 , wherein the computer-readable instructions, when executed by the computer, cause the computer to load a plug-in for facilitating communication between the software and the Certificate Authority.

10. The one or more computer-readable storage media as recited in claim 9 , wherein the plug-in is a PKI implementation-specific plug-in.

11. The one or more computer-readable storage media as recited in claim 7 , further comprising computer-readable instructions that, when executed by the computer, cause the computer to associate a level of security to the issued certificate based on a predetermined trustworthiness of the identification information.

12. The one or more computer-readable storage media as recited in claim 7 , further comprising computer-readable instructions that, when executed by the computer, cause the computer to automatically renew the certificate based on the original issuance of the certificate.

13. A certificate provisioning portal comprising:

an interface for accepting a request from a non-domain-joined client entity for a certificate from a Certificate Authority;

memory storing computer-readable instructions for:

distinguishing between a request for a renewal of a certificate previously issued by the Certificate Authority and a request for a new certificate where no certificate was previously issued by the Certificate Authority;

when a renewal certificate is indicated, then verifying that a nearly expired certificate to be renewed is genuine; and

when a new certificate is indicated, then automatically verifying the identity of the non-domain-joined client entity based on security identity information provided by the non-domain-joined client entity, the security identity information including a pre-shared secret or a certificate issued by another Certificate Authority that is trusted by the certificate provisioning portal; and

plug-in compatible architecture for interacting with the Certificate Authority to request the certificate from the Certificate Authority.

14. The certificate provisioning portal as recited in claim 13 , further comprising a plug-in for facilitating communication between the portal and one or more certificate authorities.

15. The certificate provisioning portal as recited in claim 13 , wherein the certificate provisioning portal and the Certificate Authority are integrated.

16. The certificate provisioning portal as recited in claim 13 , further comprising a module for associating a level of security to the issued certificate based on a predetermined credibility of the security identity information.

17. The certificate provisioning portal as recited in claim 13 , further comprising automatically renewing the certificate based on the original issuance of the certificate.