Patent ID: 8327132

Claim:
A method comprising: employing a processor that executes instructions defined in, stored in and retained in a computer-memory, the instructions when executed by the processor implement at least the following operations: receiving a request from a non-domain-joined client entity for a certificate to be issued by a Certificate Authority; distinguishing between a request for a renewal of a certificate previously issued by the Certificate Authority and a request for a new certificate where no certificate was previously issued by the Certificate Authority, and based on the distinguishing: verifying, when the request is for a renewal a certificate previously issued by the Certificate Authority, authenticity of the certificate previously issued certificate in a nearly expired condition; or verifying, when the request is for a new certificate, an identity of the non-domain-joined client entity through a pre-shared secret provided by the non-domain-joined client entity or through an automated process, the automated process comprising accepting security identity information from the non-domain-joined client, the security identity information including a certificate previously issued by the Certificate Authority or a certificate issued by a different trusted Certificate Authority; sending a request to a Certificate Authority to issue a certificate to the non-domain-joined client entity; receiving the certificate from the Certificate Authority; and providing the certificate to the non-domain-joined client entity.