Dynamic object creation and certificate management
Systems and methods that facilitate dynamic directory service object creation and certificate management are discussed. One such method can include discovering a device deployed on a network, creating and deploying a corresponding directory services object, automatically creating and deploying a certificate to the device and updating attributes associated with the device. The disclosed system and method reduce the time involved in deploying and configuring directory services and public key infrastructure (PKI), increase efficiency, improve network availability and lessen the chances for errors associated with manual configuration.
1. A system for dynamic object creation and certificate management, comprising:
an object component configured to create a directory services object having a unique identifier and a set of attributes each corresponding to a device on a network, the device being under direct control of a user, wherein the directory services object is based on information related to the device;
a certificate component configured to generate a digital certificate related to the device based on the information related to the device provided by the directory services object and the set of attributes, wherein, the certificate automatically requests, generates, deploys, and validates digital certificates; and
an output component that updates the directory services object with updated attributes associated with the device.
2. The system for object creation and certificate management of claim 1 , wherein the object component creates the directory service objects for the device when there are no directory services object associated with the device.
3. The system for object creation and certificate management of claim 1 , wherein the certificate component is configured to generate the digital certificate for the device when the information related to the device indicates that the device has a non-existent, expired, revoked or invalid certificate.
4. The system for object creation and certificate management of claim 1 wherein the updated directory services object is verified for the updated attributes, and wherein the attributes include at least one of LDAP, active directory services attributes, commonName, domainComponent, givenName, organizationName, owner, surname, userid, userCertificate, or macAddress.
5. The system for object creation and certificate management of claim 1 , wherein the certificate component is further configured to install the digital certificate on the device.
6. The system for object creation and certificate management of claim 1 , wherein the output component is configured to generate a notification including information related to at least one of object creation, object deployment, certificate creation, certificate installation or attribute updates.
7. The object creation and certificate management system of claim 6 , wherein the notification comprises at least one of an email, a page, a text message, a voicemail, a video message, a multimedia message, a social media message, a system log message, an audio communication or a visual indicator.
8. The system for object creation and certificate management of claim 1 , wherein the device comprises a user, groups of users, computer, smart phone, wireless access point, wireless client, printer, fax machine, copier, scanner, multi-function device, mobile device or badge reader.
9. The system for object creation and certificate management of claim 1 , wherein the digital certificate comprises an X.509 digital certificate for use in a public key infrastructure (PKI).
10. A non-transitory computer readable storage medium containing instructions which, when executed using one or more processors, perform a method for object creation and certificate management, comprising:
creating a directory service object having attributes corresponding to a device;
deploying the directory service object to the device;
automatically requesting, generating, deploying, and validating digital certificates associated with the device;
wherein validating includes validating a first digital certificate associated with the device,
wherein generating includes generating a second digital certificate based on the first digital certificate validation, the directory service object, or the attributes;
installing the second digital certificate on the device, and
updating the attributes associated with the directory service object and the second digital certificate.
11. The computer implemented method for object creation and certificate management of claim 10 , wherein the attributes include at least one of LDAP, active directory services attributes, commonName, domainComponent, givenName, organizationName, owner, surname, userid, userCertificate, or macAddress.
12. The computer implemented method for object creation and certificate management of claim 10 , including generating a notification that includes information related to directory service object creation, directory service object deployment, digital certificate creation, or digital certificate installation.
13. The computer implemented method for object creation and certificate management of claim 12 , wherein generating a notification comprises generating at least one of an email, a page, a text message, voicemail, video message, multimedia message, social media message, system log message, audio communication or visual indicator.
14. The computer implemented method for object creation and certificate management of claim 10 , comprising determining whether a directory service object exists for the device based on the information associated with the device and information associated with a directory service.
15. The computer implemented method for object creation and certificate management of claim 10 , wherein validating a digital certificate includes determining whether the digital certificate is valid, non-existent, expired, revoked or invalid.
16. The computer implemented method for object creation and certificate management of claim 15 , wherein generating a digital certificate comprises generating a digital certificate when the digital certificate validation indicates one of non-existent, expired, revoked or invalid.
17. The computer implemented method for object creation and certificate management of claim 10 , wherein the directory service object comprises a unique identifier and a set of attributes.
18. The computer implemented method for object creation and certificate management of claim 10 , wherein the digital certificate comprises an X.509 digital certificate for use in a public key infrastructure (PKI).
19. A non-transitory computer readable storage medium including instructions which, when executed on a computer or processor, perform a method for object creation and certificate management, comprising:
utilizing one or more processors and memory storing one or more programs for execution by the one or more processors, the one or more programs including instructions for:
creating an active directory service object having attributes corresponding to the device;
deploying the active directory service object to the device;
dynamically requesting, generating, deploying, and validating digital certificates associated with the device
wherein validating includes validating a first X.509 digital certificate associated with the device, and
wherein generating includes generating a second X.509 digital certificate when the digital certificate validation indicates that the first X.509 certificate is non-existent, invalid, expired or revoked, or based on the active directory service object and the attributes.
20. The computer implemented method for object creation and certificate management of claim 19 , including:
installing the second X.509 digital certificate on the device;
updating the attributes associated with the active directory service object and the second X.509 digital certificate; and
verifying the updated attributes of the active directory service object and the X.509 digital certificate; and
generating a notification that includes information related to active directory object creation, active directory object deployment, X.509 digital certificate creation, or X.509 digital certificate installation.