<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Sep 20, 2012, at 23:13 , Simon Hobson <<a href="mailto:dhcp1@thehobsons.co.uk">dhcp1@thehobsons.co.uk</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Randall C Grimshaw wrote:<br><blockquote type="cite"> >That's only likely to change if hardware vendors start providing a<br><blockquote type="cite">specific place to store a device-wide DUID, and software vendors<br>support using it. I don't see that happening soon.<br></blockquote><br>from an operational point of view, wireless 802.1x supplicants with their common use of certificates could be used to drive NAC processes such as vlan steering. So one generalized solution would be to get OS vendors to treat the wired networks in the same way.<br></blockquote><br>I know almost nothing about 802.11x, but I can't help thinking it just moves the problem. I'm assuming any certificate would be stored in storage managed by the OS - which for devices capable of PXE booting is fairly likely to be disk (or a network volume mounted in much the same way). Thus the network boot client still won't have access to it without there being system wide and environment agnostic storage for it.<br></blockquote><div><br></div>Intel's vPro Technology does this:</div><div><a href="http://www.intel.com/technology/itj/2008/v12i4/5-paper/4-embedded-2.htm">http://www.intel.com/technology/itj/2008/v12i4/5-paper/4-embedded-2.htm</a></div><div><br></div><div>chris</div><div><br><blockquote type="cite"><br>Ie, when PXE boots, it doesn't (in the general case) have access to the storage containing the later OS's key - whether DUID or 802.11x certificate - and so cannot use the later OS's key. Chances are it'll have little to no storage of it's own, and hence won't be able to store a key of it's own that the OS could (theoretically) also use.<br><br>-- <br>Simon Hobson<br><br>Visit <a href="http://www.magpiesnestpublishing.co.uk/">http://www.magpiesnestpublishing.co.uk/</a> for books by acclaimed<br>author Gladys Hobson. Novels - poetry - short stories - ideal as<br>Christmas stocking fillers. Some available as e-books.<br>_______________________________________________<br>dhcp-users mailing list<br><a href="mailto:dhcp-users@lists.isc.org">dhcp-users@lists.isc.org</a><br>https://lists.isc.org/mailman/listinfo/dhcp-users<br></blockquote></div><br></body></html>