Issuance of certificates for secure enterprise wireless network access

A system comprising:

• one or more processors;
• and
• memory to store computer-executable instructions that, when executed, cause the one or more processors to perform acts to:
• establish a point-to-point (P2P) communicative connection with a setup system;
• receive, from the setup system via the P2P communicative connection, a request for a certificate signing request (CSR) corresponding to a device;
• generate, based at least in part on the request, the CSR;
• send, to the setup system via the P2P communicative connection, the CSR;
• receive a device certificate generated by a subordinate certificate authority (CA) system, wherein the device certificate is based at least in part on the CSR;
• and
• store the device certificate for accessing an enterprise network.

A system comprising:

• one or more processors;
• and
• memory to store computer-executable instructions that, when executed, cause the one or more processors to perform acts to:
• receive, from a setup system, a first certificate signing request (CSR) corresponding to a first device;
• generate, based at least in part on a root certificate associated with the first device, a first device certificate associated with the first device;
• send, to the setup system, the first device certificate;
• receive, from the first device, a second CSR corresponding to a second device;
• determine that the second CSR is to be used to generate a second device certificate associated with the second device;
• generate the second device certificate associated with the second device;
• and
• send, to the first device, the second device certificate.