Revocation and status checking.

Withdrawing trust in a lost or compromised device quickly.

Standards

  • IETF RFC 6960 (OCSP)
  • IETF RFC 5280 (CRLs)

PKI, secure boot and updates