Mission-Critical Active Directory
Learn how to plan and manage a large-scale enterprise through Windows 2000 Active Directory.
TABLE OF CONTENTS Mission-Critical Active Directory
Chapter 9: Building a Windows 2000 PKI
In Chapter 8, we introduced the basic building blocks of PKI and, more specifically, the building blocks of Windows 2000 PKI. In this chapter, we will look at the different steps you need to consider when planning, designing, and building a Windows 2000 PKI. We will also look at three applications, which can leverage your PKI investment: smart-card logon, the Encryption File System, and S/MIME for secure SMTP messaging. To end our discussion on PKI in Windows 2000 we will present a case study.
9.1 Introduction to running a Windows 2000 PKI project
As with any other IT project, a Windows 2000 PKI project can be subdivided into four key phases: assessment, design, implementation, and management.
During the assessment phase the current and future security requirements of an organization are analyzed. This can be done by running a security audit, performing a penetration test, or just by analyzing existing processes. Of course, the assessment phase also includes a business requirement analysis. The design phase deals with the technological design of the PKI solution and with some nontechnological design topics, such as the creation of Certificate Practice Statements (CPSs). The implementation phase takes care of the rollout of the PKI solution, its integration with the existing IT environment, and, prior to the rollout, the development of customized PKI applications or modules. Once PKI is installed and deployed across your enterprise you ll need to manage and maintain it: in the management phase you ll have to deal with the support model for the...
Copyright Butterworth-Heinemann 2001 under license agreement with Books24x7
