Windows Server 2003 Security: A Technical Reference

Introduction to PKI

A public key infrastructure (PKI) is the sum total of the components (certificates, certification authority, registration authority, and Certificate Revocation List) and processes (key management, certificate enrollment, certificate revocation, etc.) that are necessary to implement the use of public key cryptographic processes. Although some uses of public key cryptography can be integrated into a process without a PKI in place, public key cryptography is easier to manage when the structure and processes provided by a PKI is present. An example of public key encryption outside of PKI and the problems that result is detailed later in this chapter in the section “Self-signed Certificates.”

Public Key Cryptographic Processes ...