Patent ID: 8850187

Claim:
A method for provisioning a device with a certificate comprising: receiving credentials transmitted from the device through an access point, the credentials identifying a credentials username and password; verifying whether the credentials are trusted according to a two-factor authentication process, the two-factor authentication process determining: i) the credentials to be trusted in the event (i) the credentials username and password match with a trusted username and password previously associated with the device and (ii) an address associated with the access point is within a range of trusted addresses; ii) the credentials to be untrusted in the event the username and password fail to match with the trusted username and password or the address fails to fall within the range of trusted addresses; providing the device with an assertion in the event the credentials are trusted, the assertion being sufficient for the device to request the certificate; preventing delivery of the assertion to the device in the event the credentials are untrusted until the device transmits trusted credentials; wherein the certificate is provided from a certificate authority (CA) upon receipt of a security token included with a certificate request transmitted from the device, the security token being required by the CA prior to providing the certificate to the device; and the security token being provided to the device from a registration authority (RA) upon receipt of the assertion being included within a security token request transmitted from the device, the assertion being required by the RA prior to providing the security token to the device.