Abstract: A method and system may include receiving, by a certificate authority computing device, a request to provision and provide a private key. A connection may be established between a requester device and a network for identification. The identity of the requester device may be verified via a network path utilized by the connection. A secure session with the requester device may be initiated using an intermediate agent on the network. A private key may be provided from the certificate authority to the requester device using the secure session. The private key may be provisioned. The intermediate agent may be connected to the network at a location that provides the requester device with a connection to the network. The intermediate agent may further authenticate the requester device using the location of the connection to the network of the requesting device.