diff --git a/bin/bastion.py b/bin/bastion.py
index b57c640..55425de 100755
--- a/bin/bastion.py
+++ b/bin/bastion.py
@@ -194,7 +194,8 @@ def run(self):
 			("export vaults declared",
 	       "list vaults declared",         self.do_export_vaults_declared),
 
-			("refresh keytab",              self.do_refresh_keytab)
+			("refresh keytab",              self.do_refresh_keytab),
+			("enroll assets",               self.do_enroll_assets)
 		]
 
 		#-- Look for an explicitly declared session ID in opts;
@@ -801,6 +802,14 @@ def do_refresh_keytab(self, request):
 		else:
 			return request.failed(result, report = "keytab regeneration failed")
 
+	def do_enroll_assets(self, request):
+		"""
+		Given a site and zone, I scan the folders in the zone and create a new configuration file based on the contents of the zone.
+		On successful completion, I create (or overwrite) a configuration file that is the asset catalog for the given zone.
+		By default, the asset catalog is written to ~/.bastion/conf-{site}-{zone}-catalog.yaml, unless otherwise specified by the arg:
+		"catalog.path"
+		"""
+		raise NotImplementedError
 
 
 if __name__ == '__main__':