Computer Auto Enrollment for non-windows platforms

I need to enroll non-windows computers for a computer certificate that I'm
planning to use for VPN.

How have people done this?

The non-windows computers are joined to the domain (have a real computer
account, and password).

I would like to write some code to auto-enroll them when they are joined to
the domain. Is there any published protocol for Microsoft's Certificate
Authority that can be used for this? Can enrollment be performed using
HTTP?

Paul Nelson
Thursby Software Systems, Inc.

.