Configuring connectivity association key and connectivity association name in a media access control security capable device

A Media Access Control Security (MACsec) device comprising:

• a receipt engine to receive a MAC address and a device identifier of a second MACsec capable device from the second MACsec capable device;
• an authentication engine to authenticate the second MACsec capable device based on the device identifier of the second MACsec capable device;
• a generation engine to generate a Connectivity Association Key (CAK), a Connectivity Association Name (CKN), and a nonce;
• an encryption engine to encrypt the CAK, the CKN, and the nonce using a public key of the second MACsec capable device to generate an encrypted packet;
• a transmission engine to send the encrypted packet to the second MACsec capable device, wherein the encrypted packet is useable by the second MACsec capable device to configure the CAK and the CKN on the second MACsec capable device by decrypting the encrypted packet using a private key corresponding to the public key of the second MACsec capable device;
• the receipt engine to receive a decrypted nonce from the second MACsec capable device, wherein the decrypted nonce is generated by decrypting the encrypted packet;
• a comparison engine to compare the decrypted nonce from the second MACsec capable device with the nonce on the MACsec capable device;
• a configuration engine to configure the CAK and the CKN on the MACsec capable device, in response to a determination that the decrypted nonce matches with the nonce;
• and
• an installation engine to establish a MACsec session with the second MACsec capable device.

A non-transitory machine-readable storage medium comprising instructions, the instructions executable by a processor to:

• receive, by a first Media Access Control Security (MACsec) device, a MAC address and a device identifier of a second MACsec capable device from the second MACsec capable device;
• authenticate, by the first MACsec capable device, the second MACsec capable device based on the device identifier of the second MACsec capable device;
• provide, by the first MACsec capable device, a MAC address and a device identifier of the first MACsec capable device to the second MACsec capable device, wherein the MAC address and the device identifier of the first MACsec capable device is usable by the second MACsec capable device to authenticate the first MACsec capable device;
• generate, by the first MACsec capable device, a Connectivity Association Key (CAK), a Connectivity Association Name (CKN), and a nonce;
• encrypt, by the first MACsec capable device, the CAK, the CKN, and the nonce using a public key of the second MACsec capable device to generate an encrypted packet;
• send, by the first MACsec capable device, the encrypted packet to the second MACsec capable device, wherein the encrypted packet is useable by the second MACsec capable device to configure the CAK and the CKN on the second MACsec capable device by decrypting the encrypted packet using a private key corresponding to the public key of the second MACsec capable device;
• receive, by the first MACsec capable device, a decrypted nonce from the second MACsec capable device, wherein the decrypted nonce is generated by decrypting the encrypted packet;
• compare, by the first MACsec capable device, the decrypted nonce from the second MACsec capable device with the nonce on the first MACsec capable device;
• and
• in response to a determination that the decrypted nonce matches with the nonce, configure, by the first MACsec capable device, the CAK and the CKN on the first MACsec capable device.