Quick response (QR) code for secure provisioning

1. A computing system, comprising:

at least one processor; and

memory storing instructions executable by the at least one processor, wherein the instructions, when executed, cause the computing system to:

receive an enrollment request, corresponding to a user, from a first client computing device that requests new device enrollment of a second client computing device to perform a secure operation on the computing system;

obtain a password associated with the user;

in response to the enrollment request and based on authenticating the first client computing device, generate a QR code including an artifact that represents the password;

communicate the QR code including the artifact that represents the password to the first client computing device;

detect a request to perform the secure operation from the second client computing device, the request indicating the second client computing device scanned the QR code displayed on the first client computing device and including the artifact that represents the password obtained from the QR code;

based on the request including the artifact, generate enrollment data that identifies the second client computing device as an enrolled device and authenticates the second client computing device for performance of the secure operation; and

perform, with the second client computing device, the secure operation based on the enrollment data.

2. The computing system of claim 1 wherein the representation of the password comprises a hash value, based on the password for the user.

3. The computing system of claim 1 wherein the instructions cause the computing system generate a limited lifetime certificate for the user, as a part of the artifact.

4. The computing system of claim 1 wherein the instructions cause the computing system to:

send an authentication value to the second client computing device in response to the computing system receiving a request from the first client computing device for which two factor authentication is to be obtained.

5. The computing system of claim 4 wherein the instructions cause the computing system to:

generate the authentication value and to use the communication system to send the authentication value to the second client computing device.

6. The computing system of claim 5 wherein the instructions cause the computing system to:

identify the second client computing device as an enrolled device corresponding to the user of the first client computing device; and

receive a value from the first client computing device and to validate that the received value corresponds to it is the authentication value generated by the value generator.

7. The computing system of claim 1 , wherein the computing system comprises a server computing system that communicates with the first and second client computing devices over a communication network.

8. The computing system of claim 1 , wherein the computing system comprises a data center computing system that is remote from the first and second client computing devices.

9. A computer implemented method, comprising:

receiving, at a computing system, an enrollment request from a first client computing device that requests new device enrollment of a second client computing device on the computing system;

in response to the enrollment request and based on authenticating the first client computing device, generating a quick response (QR) code representing an artifact;

communicating the QR code to the first client computing device;

detecting a first request from the second client computing device, the first request including the artifact and indicating the second client computing device scanned the QR code displayed on the first client computing device; and

based on the first request including the artifact, authenticating the second client computing device and generating enrollment data that identifies the second client computing device as an enrolled device;

receiving a second request from the first client computing device to perform an operation on the computing system for which two-factor authentication is to be obtained;

sending an authentication value to the second client computing device in response to the second request from the first client computing device and based on the enrollment data that identifies the second client computing device as an enrolled device;

determining that a value, received from the first client computing device, corresponds to the authentication value; and

performing the operation based on the determination.

10. The computer implemented method of claim 9 , wherein the computing system comprises a server computing system that communicates with the first and second client computing devices over a communication network.

11. The computer implemented method of claim 9 , wherein the computing system comprises a data center computing system that is remote from the first and second client computing devices.

12. The computer implemented method of claim 9 wherein generating a QR code comprises:

generating a representation of a password for the user, as at least a part of the artifact.

13. The computer implemented method of claim 12 wherein generating the representation of the password comprises:

generating a hash value, based on the password for the user, as the part of the artifact.

14. The computer implemented method of claim 12 wherein generating a QR code comprises:

generating a limited lifetime certificate for the user, as another part of the artifact.

15. The computer implemented method of claim 9 wherein sending an authentication value comprises:

generating the authentication value; and

using a communication system to send the authentication value to the second client computing device.

16. A method performed by a computing system, the method comprising:

receiving an enrollment request, corresponding to a user, from a first client computing device that requests new device enrollment of a second client computing device to perform a secure operation on the computing system;

obtaining a password associated with the user;

in response to the enrollment request and based on authenticating the first client computing device, generating a QR code that includes an artifact representing the password;

communicating the QR code including the artifact that represents the password to the first client computing device;

detecting a request to perform the secure operation from the second client computing device, the request indicating the second client computing device scanned the QR code displayed on the first client computing device and including the artifact that represents the password obtained from the QR code;

based on the request including the artifact, generating enrollment data that identifies the second client computing device as an enrolled device and authenticating the second client computing device for performance of the secure operation; and

performing the secure operation with the second client computing device based on the enrollment data.

17. The method of claim 16 , wherein the computing system comprises a server computing system that communicates with the first and second client computing devices over a communication network.

18. The method of claim 16 , wherein the computing system comprises a data center computing system that is remote from the first and second client computing devices.

19. The method of claim 16 , and further comprising:

generating a hash value, based on the password for the user, as the part of the artifact; and

generating a limited lifetime certificate for the user, as another part of the artifact.

20. The method of claim 19 , and further comprising:

generating an authentication value;

identifying the second client computing device as an enrolled device corresponding to the user of the first client computing system;

using a communication system to send the authentication value to the second client computing device; and

receiving a value from the first client computing system and validating that the received value is the authentication value.