Certificate Management Portal
Overview
API not connected
Authorized personnel only
Sign in to review enrollment requests
This portal uses an independent BD Maritime account. K-Fleet crew codes and application passwords are never accepted here.
Security boundary
Enrollment workflow
- Server generates non-exportable private keys locally.
- Only CSRs and approved node metadata reach this portal.
- An authorized administrator verifies identity and DNS assignment.
- The secured signer issues certificates from the appropriate Issuing CA.
- The server installs certificates and proves private-key possession.
One-time authorization
Create ship enrollment invitation
Pending queue
Certificate enrollment requests
| Node | Scope | Approved DNS | Requested | Status |
|---|
No enrollment requests are available.
Certificate authority inventory
Managed certificates
Renewal CSRs arrive in Enrollment Requests. Revocation requests are recorded here and must be completed by the secured CA signer and published CRL workflow.
No certificate inventory is available.
Immutable record
Enrollment and certificate audit
No audit records are available.