Chapter 12. PKI BasicsImplementing a public key infrastructure (PKI) to support IPSec, EFS, VPNs, smart cards, SSL server and client authentication, and wireless networks is not difficult. Implementing it correctly is. This is true because the process for installing the basic PKI components is simple and requires little obvious preparation. Because PKI can quickly become the security backbone for your organization's network, implementation should be preceded by careful thought, the creation of a PKI security policy, and thorough implementation planning to assure that the policy is followed. The first step is a clear understanding of what PKI is and how it works. This chapter defines the components of PKI, explains how they work, and details the specifics of Windows Server 2003 PKI. The design and implementation of a simple, secure PKI is detailed in Chapter 13, "Implementing a Secure PKI." |