1. Home
  2. /
  3. Get started with birth identities based on IEEE 802.1AR

Get started with birth identities based on IEEE 802.1AR

Implement birth identities, based on the IEEE 802.1AR standard, for your devices and solutions. You can start to explore the possibilities today, hands-on.

hero-sub-2
IEEE 802.1AR logo

An introduction to IEEE 802.1AR

IEEE 802.1AR offers secure device authentication using interoperable Secure Device Identifiers (DevIDs) in standard authentication and provisioning protocols. DevIDs, including unique manufacturer-provided Initial Device Identifiers (IDevIDs) and Locally Significant Device Identifiers (LDevIDs) used for local authorization purposes, provide unique and tamper-proof credentials. By leveraging IEEE 802.1AR, you are able to simplify maintenance and management, and it is also applicable in OPC-UA, OPC10000-21, or Bootstrapping Remote Secure Key Infrastructure (BRSKI) RFC8995.

You can issue IDevID and LDevID certificates and build the security infrastructure to support your solution with EJBCA. 

How to get started

By implementing this standard, organizations can establish trust relationships between devices, preventing unauthorized access and protecting against rogue devices. IEEE 802.1 AR utilizes digital certificates to authenticate devices, ensuring only authorized and trusted devices can access the network. This protocol promotes interoperability, scalability, and future-proofing, enabling organizations to easily integrate devices from different vendors and adapt to evolving network environments.

In this tutorial, you will learn how to: 

  • Configure an Issuing Certificate Authority (CA) to provision Initial Device Identifiers (IDevIDs)
  • Configure certificate profiles and end entity profiles for an IDevID
  • Test your setup and issue IDevIDs certificates

IMPORTANT: Kindly follow the sequence of tutorials as arranged in this YouTube playlist.

Prerequisites

Before you begin, you need to have a Root Certificate Authority (CA) set up in EJBCA. To learn how to set up a Root CA, you can follow the tutorial Create your first Root CA using EJBCA.

You also need a configured REST interface. For information on enabling the EJBCA REST API Certificate Management service to allow issuing certificates with an EJBCA, see EJBCA REST Interface.

 

Documentation

Tutorials/documentation

Documentation

Check out the supplementary documentation that goes hand-in-hand with our tutorial video.

Docker Hub

Get your hands on the EJBCA Docker container by downloading it now from Docker Hub.

YouTube

Take a peek at our tutorial video on YouTube, and browse through some of our other videos as well.

Discuss

You can ask your questions and learn from PKI specialists in the EJBCA forum on GitHub Discussions.

Related open-source projects

This website uses cookies

Cookies consist of small text files. They contain data that is stored on your device. To enable us to place certain types of cookies we need to obtain your consent. At PrimeKey Solutions AB, corp. ID no. 556628-3064, we use the following kinds of cookies. To read more about which cookies we use and storage times, click here to access our cookies policy.

Manage your cookie-settings

Necessary cookies

Check to consent to the use of Necessary cookies
Necessary cookies are cookies that must be placed for basic functions to work on the website. Basic functions are, for example, cookies which are needed so that you can use menus on the website and navigate on the site.

Functional cookies

Check to consent to the use of Functional cookies
Functional cookies need to be placed on the website in order for it to perform as you would expect. For example, so that it recognizes which language you prefer, whether or not you are logged in, to keep the website secure, remember login details or to be able to sort products on the website according to your preferences.

Cookies for statistics

Check to consent to the use of Cookies for statistics
For us to measure your interactions with the website, we place cookies in order to keep statistics. These cookies anonymize personal data.

Cookies for ad-tracking

Check to consent to the use of Cookies for ad-tracking
To enable us to offer better service and experience, we place cookies so that we can provide relevant advertising. Another aim of this processing is to enable us to promote products or services, provide customized offers or provide recommendations based on what you have purchased in the past.

Ad measurement user cookies

Check to consent to the use of Ad measurement user cookies
In order to show relevant ads we place cookies to tailor ads for you

Personalized ads cookies

Check to consent to the use of Personalized ads cookies
To show relevant and personal ads we place cookies to provide unique offers that are tailored to your user data