Managing Robust PKI Services Course

A 3-day course which is considered essential for anyone who will be administering a Managed PKI solution. It covers the issues and technologies involved in PKI in depth and gives hands-on practical experience of setting up and maintaining a PKI solution.

This course is aimed at anyone involved in decision making, implementing and securing e-commerce and other Internet applications, including: CIOs, Chief Security Officers, MIS Directors, Security Managers, and Internal Auditors.

Solid understanding of the Internet and World Wide Web technologies.

Topics covered on the 3 day Managing Robust PKI Services course

The House of Security

• Security principles for e-commerce
• Digital authentication
• Data integrity across the Internet
• Non-repudiation criteria
• Creating a digital identity
• The concept of a certification authority
• The legal and procedural environment

Basic cryptography

• Early cryptography
• Cryptographic techniques
• Common symmetric key algorithms
• Data Encryption Standard (DES)
• Ideal cryptographic system

Asymmetric cryptography and digital signatures

• Diffie-Hellman key exchange
• Public key cryptography
• RSA public key cryptography
• Signing electronic messages
• Message digests

The role of digital certificates

• Need for digital certificates
• Public key substitution
• Basic certificate contents
• X.509 certificate attributes
• Assurance/cost trade-off

PKI and certification authorities

• What is a public key infrastructure?
• Certification authority
• Certification practices statement
• Public vs. private certification authorities
• In-house, outsourced, hybrid solutions
• VeriSign Trust Network

VeriSign Managed PKI

• Exploring the VeriSign Managed PKI solution

Lifecycle management

• Issuing a certificate
• Key escrow and recovery
• Certificate renewal
• Certificate revocation

PKI standards

• X.509
• RSA’s role in standards (PKCS)
• Secure Sockets Layer, SSL (TLS)
• S/MIME
• Internet Protocol Security – IPSEC

Infrastructure

• LDAP
• Smart cards
• Software based roaming solutions
• Active directory
• Kerberos
• PKI toolkits

Advanced product integration

• Go Secure! products