Granted Patent B1

US 9,166,970 · App. 13/896,504 · Granted Oct 20, 2015

Abstract

Claims (41)

1. A method comprising:

receiving, by a script hosting server, a script from an authenticated source;

storing, by the script hosting server, the script in a script database;

associating, by the script hosting server, the script with a certificate profile for a digital certificate based on input from the authenticated source, wherein more than one script can be associated with the certificate profile;

receiving, by the script hosting server, user enrollment information for the certificate profile from the authenticated source, wherein the user enrollment information indicates an enrolled user for the certificate profile;

storing the user enrollment information in a user database;

receiving, by the script hosting server, a script request of a client device, the script request identifying the certificate profile and a user of the client device;

determining, by the script hosting server, whether-when the user is enrolled in the certificate profile based on the user enrollment information in the user database; and

upon determining that the user is enrolled, providing the associated one or more scripts to the client device.

2. The method of claim 1 further comprising digitally signing the associated one or more scripts one or more scripts with a digital signature.

3. The method of claim 1 , wherein the associated one or more scripts are digitally signed by the authenticated source.

4. The method of claim 1 , wherein the request for the associated one or more scripts is received in response to a certificate lifecycle event.

5. The method of claim 4 , wherein the certificate lifecycle event is any one of enrolling, renewing, or importing the digital certificate.

6. The method of claim 1 , wherein the associated one or more script are to automatically configure an application.

7. A system comprising:

a server comprising a memory and a processing device coupled to the memory, the processing device is to:

receive a script from an authenticated source;

store the script in a script database;

associate the script with a certificate profile for a digital certificate based on input from the authenticated source, wherein more than one script can be associated with the certificate profile;

receive user enrollment information for the certificate profile from the authenticated source, wherein the user enrollment information indicates an enrolled user for the certificate profile;

store the user enrollment information in a user database receive a script request of a client device, the script request identifying the certificate profile and a user of the client device;

determine whether-when the user is enrolled in the certificate profile based on the user enrollment information; and

upon determining that the user is enrolled, providing the associated one or more scripts to the client device.

8. The system of claim 7 further comprising a client device executing a security agent, wherein the security agent is to: detect a lifecycle event associated with the certificate profile in response to user input; receive the associated one or more scripts; and initiate execution of the associated one or more scripts to configure an application.

9. The system of claim 7 , wherein the associated one or more scripts are digitally signed by the authenticated source.

10. The system of claim 7 , wherein the request for the associated one or more scripts is received in response to a certificate lifecycle event.

11. The system of claim 7 , wherein the processing device is further configured to send the digital certificate to the client device.

12. The system of claim 7 , wherein the associated one or more scripts comprises a script for automatic application configuration.

13. A non-transitory computer readable storage medium including instructions that, when executed by a processing device, cause the processing device to perform a set of operations comprising:

receiving a script from an authenticated source;

storing the script in a script database;

associating the script with a certificate profile for a digital certificate based on input from the authenticated source, wherein more than one script can be associated with the certificate profile;

receiving user enrollment information for the certificate profile from the authenticated source, wherein the user enrollment information indicates an enrolled user for the certificate profile;

storing the user enrollment information in a user database receiving a script request of a client device, the script request identifying the certificate profile and a user of the client device;

determining whether-when the user is enrolled in the certificate profile based on the user enrollment information in the user database; and

upon determining that the user is enrolled, providing the associated one or more scripts to the client device.

14. The non-transitory computer readable storage medium of claim 13 , wherein the set of operations further comprises digitally signing the associated one or more scripts with a digital signature.

15. The non-transitory computer readable storage medium of claim 13 , wherein the associated one or more scripts are digitally signed by the authenticated source.

16. The non-transitory computer readable storage medium of claim 13 , wherein the request for the associated one or more scripts is received in response to a certificate lifecycle event.

17. The non-transitory computer readable storage medium of claim 16 , wherein the certificate lifecycle event is any one of enrolling, renewing, or importing the digital certificate.

18. The non-transitory computer readable storage medium of claim 13 , wherein the associated one or more scripts are to automatically configure an application.

Assignments (11)