Pki for dummies

9,080 views

Published on

Slidedeck used at the Dutch Techdays Event in 2012.

0 Comments
2 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
9,080
On SlideShare
0
From Embeds
0
Number of Embeds
24
Actions
Shares
0
Downloads
199
Comments
0
Likes
2
Embeds 0
No embeds

No notes for slide

Pki for dummies

  1. 1. PKI for Dummies Alex de Jong Microsoft Freelance
  2. 2. Agenda• PKI Overview• Your own PKI
  3. 3. Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, andprocedures needed to create, manage, distribute, use, store, and revoke digital certificates
  4. 4. Subject Valid from/toIssuer Serial Number
  5. 5. Certificate Extensions• Subject, Serial Number, Issuer, Valid From, Valid To• Public Key• Subject Alternative Names (SANs)• Authority Information Access (AIA)• Certificate Revocation Lists (CRLs)• Enhanced Key Usage
  6. 6. Authentication Encryption Authenticity
  7. 7. 3 Encryption “methods”• Symmetric – 1 encryption key for encryption and decryption• Asymmetric – 2 keys encryption keys: Public & Private• Hashing – Used for Authenticity checking, passwords – Irreversible
  8. 8. Authenticity• Digitally Signed Data – e-mail, documents, this PowerPoint
  9. 9. About the Issuer
  10. 10. DEMOPublic CA’s
  11. 11. Building one of your 0wn3d• Stand alone vs. Enterprise• Design Considerations• Certificate Revocation Lists (CRL’s)
  12. 12. Building one of your 0wn3d• Certificate Templates• Web Services• …
  13. 13. DEMOPrivate CA’s
  14. 14. Enrolling certificates• Web Services• Auto Enrollment• MMC Snap-in
  15. 15. From the client side• Managing your own certificates• Checking the others
  16. 16. DEMOManaging Certificates

×