My devices have device certificates that are generated from a root certificate that I control. I use the device certificates as the certificate that devices use to authenticate to the Mender server with (mender-agent.pem)
Rather than needing to upload each device’s certificates in order to preauthorize devices, would it be possible to preauthorize all device certs generated from my root certificate? This is similar to the AWS IoT ‘JIT’ provisioning flow.
This would make preauthorization much easier for my use case, as it wouldn’t be necessary to keep a record of each generated device certificate.