Networked Media Open Specifications

Certificate Provisioning Tags

This document describes an application of the AMWA IS-04 tags structures to enable control systems to identify Nodes that are using BCP-003-03 for automated certificate provisioning.

Introduction

Since AMWA IS-04 v1.0, NMOS resources contain a tags field that has not been used in a standard way.

Certificate Provisioning URN

The certificate provisioning URN urn:x-nmos:tag:certprov defines a list of BCP-003-03 versions that are ‘enabled’ on a Node. If BCP-003-03 is not currently enabled on a Node, no version number should be listed.

"tags": {
   "urn:x-nmos:tag:certprov": [
      "<enabled version>"
   ]
}

Where

Parameter Description Values
enabled version A version of BCP-003-03 that is enabled Version strings, v<MAJOR>.<MINOR>, e.g. v1.0

Examples

1. BCP-003-03 version 1.0 enabled

JSON tags for when BCP-003-03 is being used to automatically provision TLS certificates

"tags": {
   "urn:x-nmos:tag:certprov": [
      "v1.0"
   ]
}

2. Multiple BCP-003-03 versions enabled

JSON tags for when BCP-003-03 is being used to automatically provision TLS certificates and the Node supports multiple versions

"tags": {
   "urn:x-nmos:tag:certprov": [
      "v1.0",
      "v1.1"
   ]
}

3. BCP-003-03 implemented but disabled

JSON tags for when BCP-003-03 is supported but NOT currently being used to automatically provision TLS certificates

"tags": {
   "urn:x-nmos:tag:certprov": [
   ]
}