PKI is a set of components needed to issue and manage digital certificates. It includes hardware, software, policies and people. Certificates contain a subject's public key and are digitally signed by a certificate authority. PKIs can be public, where any system can validate certificates, or private, where only an organization's systems participate. Building a private PKI requires designing certificate templates and revocation processes. Managing certificates involves enrollment methods and checking certificate status.

2. PKI for Dummies
Alex de Jong
Microsoft Freelance

3. Agenda
• PKI Overview
• Your own PKI

4. Public Key Infrastructure (PKI) is a set of
hardware, software, people, policies, and
procedures needed to create, manage, distribute,
use, store, and revoke digital certificates

5. Subject Valid
from/to
Issuer
Serial Number

6. Certificate Extensions
• Subject, Serial Number, Issuer, Valid From, Valid To
• Public Key
• Subject Alternative Names (SANs)
• Authority Information Access (AIA)
• Certificate Revocation Lists (CRLs)
• Enhanced Key Usage

7. Authentication Encryption
Authenticity

8. 3 Encryption “methods”
• Symmetric
– 1 encryption key for encryption and decryption
• Asymmetric
– 2 keys encryption keys: Public & Private
• Hashing
– Used for Authenticity checking, passwords
– Irreversible

9. Authenticity
• Digitally Signed Data
– e-mail, documents, this PowerPoint

10. About the Issuer

11. DEMO
Public CA’s

12. Building one of your 0wn3d
• Stand alone vs. Enterprise
• Design Considerations
• Certificate Revocation Lists (CRL’s)

13. Building one of your 0wn3d
• Certificate Templates
• Web Services
• …

14. DEMO
Private CA’s

15. Enrolling certificates
• Web Services
• Auto Enrollment
• MMC Snap-in

16. From the client side
• Managing your own certificates
• Checking the others

17. DEMO
Managing Certificates