Introduction

This blueprint focuses on certificate services, and provides detailed information on how certification mechanisms operate and how they can be deployed in an enterprise-class organization.

Windows Server System Reference Architecture (WSSRA) is an integrated set of service solutions based on architectural guidance for enterprise, corporate, and branch office level scenarios; these scenarios are outlined in the Introduction to Windows Server System Reference Architecture document of this documentation set. Other blueprints have already introduced the requirement for a secure infrastructure, and the Security Architecture Blueprint discussed the process for its design and implementation. Specific implementation details are provided in the Certificate Services Planning Guide.

On This Page

	Who Should Read This Blueprint
	Knowledge Prerequisites
	Business Need
	References

Who Should Read This Blueprint

This blueprint is written to meet the requirements of information technology (IT) professionals who are responsible for designing and deploying security and network infrastructure in enterprise environments.

Top of page

Knowledge Prerequisites

The reader of this blueprint is expected to have some prior understanding of the technical details provided. However, service-level expertise is not required to understand the enterprise-level discussions and decisions that are made.

The reader should be familiar with the fundamentals of public key security systems, the benefits they offer, and the components required for implementing them. For further information on public key security systems, refer to the white papers at the following URLs:

For more information on certificates, refer to the Microsoft Knowledge Base article “195724 Description of Digital Certificates” at the following URL:

www.support.microsoft.com/?id=195724

Before reading this blueprint, the reader should also be familiar with the basic concepts of the following technologies:

For further reading on these technologies, refer to the “References” section in the Network Services Blueprint. More information about Active Directory can also be found at the following URL:

http://www.microsoft.com/windows2000/technologies/directory/ad/default.asp

Top of page

Business Need

Computer networks are no longer closed systems where the mere presence of a user can serve as a sufficient proof of identity. In this age of information interconnection, an organization's network may consist of intranets, Internet sites, and extranets, all of which are susceptible to intrusion by individuals with malicious intent seeking a variety of data files, from e-mail messages to e-commerce transactions. To mitigate the risks incurred by this susceptibility, mechanisms for establishing and sustaining a user's identity are required. A centrally managed, electronic identity for users can provide the following:

These requirements deal with electronic information assets, and have a direct impact on most organizations. Any mechanism that is implemented to deal with these requirements must be both manageable and secure.

Top of page

References

The following links provide relevant information for the certificate services and documents related to PKI issues and technologies:

Top of page