Remote certificate authority management

A system, comprising:

• a data processing apparatus;
• and
• a non-transitory computer readable storage medium in data communication with the data processing apparatus and storing instructions executable by the data processing apparatus and upon such execution cause the data processing apparatus to perform operations comprising:
• receiving, by a remote certificate authority (CA) gateway core from a certificate lifecycle management (CLM) application installed on a user device, a task request specifying a requested task and an identifier specifying a location for task execution;
• determining, by a task pickup interface on a remote CA gateway plug-in module and based on the task request, that the requested task and the location for the task execution for the requested task are at an on-premises CA device;
• in response to determining that the requested task and the location of the task execution are at the on-premises CA device, storing, in a data storage device on the remote CA gateway plug-in module, a request task data entry that links the task request to the location for the task execution;
• providing, from the remote CA gateway plug-in module, a notification to an on-premises CA gateway, wherein the remote CA gateway plug-in module maintains a constant communication connection with the on-premises CA gateway via a persistent client-initiated communication protocol;
• and
• in response to the notification, providing, from the on-premises CA gateway to the on-premises CA device, the requested task for the task execution.

A non-transitory computer storage medium encoded with a computer program, the computer program comprising instructions that when executed by one or more data processing apparatus cause a data processing apparatus to perform operations comprising:

• receiving, by a remote certificate authority (CA) gateway core from a certificate lifecycle management (CLM) application installed on a user device, a task request specifying a requested task and an identifier specifying a location for task execution;
• determining, by a task pickup interface on a remote CA gateway plug-in module and based on the task request, that the requested task and the location for the task execution for the requested task are at an on-premises CA device;
• in response to determining that the requested task and the location of the task execution are at the on-premises CA device, storing, in a data storage device on the remote CA gateway plug-in module, a request task data entry that links the task request to the location for the task execution;
• providing, from the remote CA gateway plug-in module, a notification to an on-premises CA gateway, wherein the remote CA gateway plug-in module maintains a constant communication connection with the on-premises CA gateway via a persistent client-initiated communication protocol;
• and
• in response to the notification, providing, from the on-premises CA gateway to the on-premises CA device, the requested task for the task execution.