Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am doing a project that needs device authentication with a gateway. What are some of the best ways of doing that ? Whether a certificate based mechanism is feasible in this case ?

share|improve this question
1  
There are several questions on the site which might be useful. One of my own appears to be similar to your needs. –  logicalscope Apr 17 '12 at 16:36

1 Answer 1

Yes, you could use a SSL client certificate for this. Each device would receive its own SSL client certificate. The device could authenticate to the gateway by connecting over SSL and authenticating using its client cert. This would allow the gateway to allow access for authorized devices (those devices whose client cert is on an approved list, or those devices who cert is signed by an internal CA set up for this purpose).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.