10-配置AD CS.pptVIP

实验 : 配置 AD CS 练习1: 安装AD CS 服务器角色 练习2: 颁发和安装一个子CA证书 练习3:发布CRL Logon information 虚拟机名称 6426A-NYC-DC1 6426A-NYC-SVR1 用户名 Administrator 口令 Pa$$w0rd 预计时间: 30 分钟 Module x: Title Course xxxxy * Module x: Title Course xxxxy * Module x: Title Course xxxxy * Discuss as follows: Define PKI. How does PKI provide infrastructure security by providing confidentiality, integrity, authenticity, and non-repudiation. Module x: Title Course xxxxy * Start a discussion with the students about how a PKI solution enhances security in their environments. The goal of this discussion is to have all students understand what services are commonly protected by PKI. Use the following questions as a guide, and provide additional ones as necessary. What benefit would a PKI solution provide to your organization? What are examples of applications or services that can use certificates to enhance security? Module x: Title Course xxxxy * Describe each of the following points: Certificate Authority – Issues and manages certificates to users, services, and computers. Digital Certificates – Provides the foundation of a PKI. Certificate and CA Management Tools – Provides command-line and graphical-user interface tools to configure Certificate Authorities, recover archived private keys, import and export keys and certificates, publish CA certificates and CRLs, and manage issued certificates. Authority Information Access? and CRL Distribution Points – Provides publication locations from where certificates and CRLs are made available. Certificate Templates – Defines the content and purpose of a digital certificate. Certificate Revocation List – Lists the certificates that are revoked by a CA before reaching their expiration date. Public-key Enabled Applications and Services – Supports public key encryption to enable implementation of public key security. Module x: Title Course xxxxy * Describe the three distinct but interrelated processes of CryptoAPI to determine a certificate’s validity: Certificate