文档介绍：Developing a Certificate Developing a Certificate Strategy: People, Process and Strategy: People, Process and Technology Elements of a PKI Technology Elements of a PKI Steve Clark Steve Clark Sr. Technology Specialist Sr. Technology Specialist Microsoft Corp. Microsoft Corp. Agenda: Agenda: Basic concepts of a PKI Basic concepts of a PKI Overview of 2 Major Encryption Types Overview of 2 Major Encryption Types Certificates, CA Certificates, CA ’’ s, CA Roles s, CA Roles Microsoft PKI Features/Benefits Microsoft PKI Features/Benefits Enrollment/Revocation policies Enrollment/Revocation policies SCI Deployment Scenarios SCI Deployment Scenarios How to Apply SCI solutions (examples) How to Apply SCI solutions (examples) Questions Questions Basic Concepts of a PKI Basic Concepts of a PKI A set of enabling technologies and A set of enabling technologies and their supporting people and process their supporting people and process elements that enable a business to elements that enable a business to securely perform certain functions securely perform certain functions Encryption algorithms and methods Encryption algorithms and methods (style really (style really does does matter) matter) Asymmetric vs. Symmetric Asymmetric vs. Symmetric How large is the target environment, and How large is the target environment, and what is their anticipated use of what is their anticipated use of cryptography? cryptography? A PKI Can Provide: A PKI Can Provide: Authentication Authentication who are you? who are you? Authorization Authorization what can you do? what can you do? Privacy Privacy encryption encryption can anybody see what you do? can anybody see what you do? Data integrity Data integrity can anybody change your action? can anybody change your action? And more! And more! A A ““ prehensive ”” PKI PKI Client Software Client Software Cross-Certification Cross-Certification Key History Key History Management Management Non-repudiation Non-repudiation Nota