Cómo usar variables con certificados en ChromeOS

Problema

¿Cómo puedes usar variables para personalizar certificados en dispositivos ChromeOS?

Entorno

  • certificados SCEP.
  • Dispositivos ChromeOS

Solución

Puedes usar la variable para SAN, pero solo las admitidas. Esta es la lista de los compatibles:
${DEVICE_DIRECTORY_ID}—Device’s directory ID
${USER_EMAIL}—Signed-in user’s email address
${USER_EMAIL_DOMAIN}—Signed-in user’s domain name
${DEVICE_SERIAL_NUMBER}—Device's serial number
${DEVICE_ASSET_ID}—Asset ID assigned to device by administrator
${DEVICE_ANNOTATED_LOCATION}—Location assigned to device by administrator
${USER_EMAIL_NAME}—First part (part before @) of signed-in user’s email address