Cloud identity bootstrap

Kerrigan activation-code pairing

The appliance keeps its private key; the cloud approves a short-lived code and returns a matching certificate.

Kerrigan activation-code pairing Sequence showing a local administrator asking Kerrigan to pair, Kerrigan generating its key and submitting a certificate request, a backoffice operator claiming the displayed activation code through an IAM-protected service, and Kerrigan polling, validating, and installing the approved cloud identity. SELECT ENV + START GENERATE KEY + CSR POST CSR / PAIRINGS CODE + POLL TOKEN DISPLAY + COPY CODE SHARE CODE SAFELY IAM-SIGNED CLAIM PROVISION IOT IDENTITY POLL WITH TOKEN APPROVED CERTIFICATE LOCAL Administrator HOST Kerrigan HTTPS Pairing service CLOUD Backoffice Validate key match ยท install atomically LEGEND HTTPS CALL RETURN APPROVED IDENTITY