Decentralized enrollment and revocation of devices

One or more non-transitory computer-readable storage media storing one or more sequences of program instructions which, when executed by one or more computing devices, cause performing:

• receiving, at a first server, a plurality of certificates and an inventory list and storing the plurality of certificates and the inventory list in a blockchain;
• receiving, at a second server associated with the blockchain, a validation request from a device and validating the device;
• in response to validating the device, receiving, at the second server, a certificate request from the device and verifying the certificate request against the inventory list stored in the blockchain;
• and
• in response to verifying the certificate request, enrolling the device by sending a certificate from the plurality of certificates stored in the blockchain to the device.

A computer system comprising:

• one or more processors;
• a computer-readable storage media coupled to the one or more processors;
• a memory coupled to the computer readable storage media and storing instructions which, when executed, cause the one or more processors to:
• receive, at a first server, a plurality of certificates and an inventory list and storing the plurality of certificates and the inventory list in a blockchain;
• receive, at a second server associated with the blockchain, a validation request from a device and validating the device;
• in response to validating the device, receive, at the second server, a certificate request from the device and verify the certificate request against the inventory list stored in the blockchain;
• and
• in response to verifying the certificate request, enroll the device by sending a certificate from the plurality of certificates stored in the blockchain to the device.