McsaMcse Training Kit Implementing And Administering Security In A Windows 1002000 Network [Electronic resources] نسخه متنی

Chapter 6

Managing a Public Key Infrastructure

About This Chapter

Your infrastructure of Certificate Authorities (CAs) and certificate-enabled services is called a public key infrastructure (PKI). In Chapter 5, "Certificate Authorities," you learned how to deploy and manage CAs. In this chapter, you learn about the types of certificates that CAs can create and how they are used within Microsoft Windows 2000.

You need to understand the differences between computer certificates and user certificates, and what each type of certificate is used for.

Before You Begin

To complete the lessons in this chapter, you must have

An enterprise root CA as configured in Chapter 5

A stand-alone subordinate CA as configured in Chapter 5

A Windows 2000 computer configured as a domain member

A smart card reader attached to the Windows 2000 domain member

One unused smart card

You can purchase Windows 2000-compatible smart cards and readers directly from Schlumberger at their Web site: www.smartcards.net.