Implementing a Public Key Infrastructure (PKI), Windows Server 2003, Part I

(Page 1 of 4 )

E-commerce, e-healthcare, e-banking, and other types of organizations usually require a high level of security for their data and infrastructure. Such security can be tricky to implement, at best. Public Key Infrastructure (PKI) can be a good place to start; read on to learn how to implement a PKI using Microsoft Windows Server 2003.

Introduction

Securing the infrastructure and data of an organization is not a simple task. There are many factors that must be considered before implementing security, such as the level of security we want to achieve. Based on the nature of the organization (i.e. e-commerce, e-healthcare, portal, mobile services), we need to apply appropriate security technologies to reach the required security level. If the organization needs a high level of security that calls for encryption, non-repudiation, authentication of users, and integrity of data, a Public Key Infrastructure (PKI) is a good starting point for addressing the problem.

In this article, I will discuss how to implement a Public Key Infrastructure using Microsoft Windows Server 2003 (also referred to as Microsoft Certificate Services). I will assume that you are familiar with terms such as public key cryptography, certificate authorities, digital certificates, digital signatures etc.

Overview of Microsoft Windows Server 2003 PKI    

Windows Server 2003 Standard and Enterprise Editions include a PKI feature that can be used to benefit from public key cryptography. In addition, if you already have Windows Server 2003 (or 2000) you may save money as you can operate your own PKI and issue digital certificates to users, computers or services, instead of buying them from Certificate Authorities (CA) like VeriSign.

The Windows Server 2003 PKI supports a wide range of applications, including:

• Secure email
• Digital signatures that enable non-reputable transactions
• Integrity control check of data
• Trusted remote access to network resources
• Authorization access on machines

Next: Defining CA types >>
 

More Windows Security Articles
More By Eliana Stavrou

Comments On: Implementing a PKI, Windows 2003

· Hi to all readers,thank you for stopping by my article. As you can read in the...   >>> Post your comment now!