CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 25

Public Key Infrastructure

This chapter covers the following official Security+ exam objective:

• ▶ 3.9 Given a scenario, implement public key infrastructure.

Essential Terms and Components

• ▶ public key infrastructure (PKI)

• ▶ digital certificate

• ▶ key management

• ▶ certificate authority (CA)

• ▶ intermediate CA

• ▶ registration authority (RA)

• ▶ certificate revocation list (CRL)

• ▶ Online Certificate Status Protocol (OCSP)

• ▶ certificate signing request (CSR)

• ▶ distinguished encoding rules (DER)

• ▶ privacy enhanced mail (PEM)

• ▶ personal information exchange (PFX)

• ▶ stapling

• ▶ pinning

• ▶ trust model

• ▶ key escrow

• ▶ certificate chaining

PKI Components

To begin to understand the applications and deployment of a public key infrastructure