Enroll
Allows verification of a controller or cluster of controllers as being the valid target for enrollment.
A caller may submit a nonce and a key id (kid) from the enrollment JWKS endpoint or enrollment JWT that will be used to sign the nonce. The resulting signature may be validated with the associated public key in order to verify a networks identity during enrollment. The nonce must be a valid formatted UUID.
post/enroll/challenge
Request body
Response
A nonce challenge response. The contents will be the signature of the nonce, the key id used, and algorithm used to produce the signature.
Example response
{
"signature": "signature",
"caPool": "caPool",
"kid": "kid",
"algorithm": "algorithm"
}