You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Issue mTLS-capable device identity certificates to ChromeOS devices enrolled in Google Workspace, for use in Wi-Fi, VPN, or internal application authentication.
6
6
---
7
7
8
-
Smallstep issues two different kinds of certificate to a ChromeOS device enrolled through [Google Workspace](connect-google-workspace-to-smallstep.mdx): a short-lived **attestation certificate**, issued automatically, and a longer-lived **device identity certificate**, which is what you actually use for mTLS — Wi-Fi (802.1X), VPN, or authenticating to internal applications.
8
+
Smallstep issues two different kinds of certificate to a ChromeOS device enrolled through [Google Workspace](./connect-google-workspace-to-smallstep.mdx): a short-lived **attestation certificate**, issued automatically, and a longer-lived **device identity certificate**, which is what you actually use for mTLS — Wi-Fi (802.1X), VPN, or authenticating to internal applications.
9
9
10
-
This guide covers issuing that device identity certificate. It's a prerequisite for [ChromeOS Wi-Fi Enrollment](protect-wireless-networks.mdx#chromeos-with-google-workspace-acme-device-attestation) and for any other mTLS use case involving ChromeOS devices.
10
+
This guide covers issuing that device identity certificate. It's a prerequisite for [ChromeOS Wi-Fi Enrollment](./protect-wireless-networks.mdx#chromeos-with-google-workspace-acme-device-attestation) and for any other mTLS use case involving ChromeOS devices.
11
11
12
12
# Prerequisites
13
13
14
-
- A completed [Connect Google Workspace to Smallstep](connect-google-workspace-to-smallstep.mdx) integration, with devices syncing into Smallstep
14
+
- A completed [Connect Google Workspace to Smallstep](./connect-google-workspace-to-smallstep.mdx) integration, with devices syncing into Smallstep
15
15
- The Smallstep ChromeOS extension deployed to your target Organizational Unit (covered in that same guide)
16
16
17
17
# Attestation certificate vs. device identity certificate
@@ -102,4 +102,4 @@ The Smallstep dashboard's device detail page may continue to show "This device d
102
102
103
103
# Next steps
104
104
105
-
With a device identity certificate issued, continue to [ChromeOS Wi-Fi Enrollment](protect-wireless-networks.mdx#chromeos-with-google-workspace-acme-device-attestation) to use it for passwordless 802.1X Wi-Fi authentication.
105
+
With a device identity certificate issued, continue to [ChromeOS Wi-Fi Enrollment](./protect-wireless-networks.mdx#chromeos-with-google-workspace-acme-device-attestation) to use it for passwordless 802.1X Wi-Fi authentication.
Copy file name to clipboardExpand all lines: tutorials/connect-google-workspace-to-smallstep.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -141,5 +141,5 @@ After saving the Google Workspace connection, you will see settings for your int
141
141
Within a few minutes, you should see all of your ChromeOS devices in Smallstep's [Devices](https://smallstep.com/app/?next=/devices/all) tab.
142
142
A full sync is performed every 8 hours, and a partial sync every hour.
143
143
144
-
With the extension deployed, continue to [Configure ChromeOS Device Identity Certificates](chromeos-device-identity-certificates.mdx) — by default the extension only requests a short-lived attestation certificate, which can't be used for Wi-Fi, VPN, or mTLS.
144
+
With the extension deployed, continue to [Configure ChromeOS Device Identity Certificates](./chromeos-device-identity-certificates.mdx) — by default the extension only requests a short-lived attestation certificate, which can't be used for Wi-Fi, VPN, or mTLS.
0 commit comments