Chapter 20: Implementing Security for Certificate Services

Chapter 20

Implementing Security for Certificate Services

The installation of Certificate Services allows you to configure a Certification Authority (CA) in a Microsoft network that issues digital certificates to users and computers. Certificate Services is the core component of the Windows 2000 Public Key Infrastructure (PKI).

Windows 2000 Certificate Services allows for the installation of two types of CAs: standalone CAs and enterprise CAs. A standalone CA is typically used for offline CAs (CAs that are removed from the network to increase security). An enterprise CA is typically used to issue certificates to users and computers.