Chapter 6: Managing a Public Key Infrastructure

Chapter 6

Managing a Public Key Infrastructure

About This Chapter

Your infrastructure of Certificate Authorities (CAs) and certificate-enabled services is called a public key infrastructure (PKI). In Chapter 5, "Certificate Authorities," you learned how to deploy and manage CAs. In this chapter, you learn about the types of certificates that CAs can create and how they are used within Microsoft Windows 2000.

You need to understand the differences between computer certificates and user certificates, and what each type of certificate is used for.

Before You Begin

To complete the lessons in this chapter, you must have

• An enterprise root CA as configured in Chapter 5

• A stand-alone subordinate CA as configured in Chapter 5

• A Windows 2000 computer configured as a domain member

• A smart card reader attached to the Windows 2000 domain member

• One unused smart card

  You can purchase Windows 2000-compatible smart cards and readers directly from Schlumberger at their Web site: www.smartcards.net.