
Paying someone to design, implement, and manage the PKI infrastructure. How much money is your business willing to invest in the PKI solution? What are the costs for implementing a PKI? Here are some items that may need to be included in your budget: Despite our wishes as technology professionals that we could implement the appropriate solutions, sometimes we are handicapped by the budget that we have to complete a project. I understand how difficult it can be to get budgets approved in any business. The next thing you want to think about is cost. Not only do you want to deploy a PKI solution that supports existing technologies, but one that is scalable, and can support future technologies. My point here is that your design should incorporate plenty of flexibility. In fact some of the applications or technologies that your PKI may be required to support may not have even been conceived of yet. This may not be an answerable question, nor should you be expected to know for sure. Here is a brief list:Īnother thing to consider is what future applications you may need to support with your PKI. In addition a number of applications can use certificates in some fashion.

Protect traffic to internal web-sites with SSL Implement two-factor authentication with Smart Cards Protect LDAP-based directory queries Secure LDAP
#NEW CERTIFICATE DESIGN TEMPLATE CODE#
There are a host of reasons to deploy a PKI a few are listed here:Ĭontrol access to the network with 802.1x authenticationĪpprove and authorize applications with Code Signing And both books go into far more detail then I can here. They are both excellent resources for anyone implementing, managing, or designing solution that use a Microsoft PKI.
#NEW CERTIFICATE DESIGN TEMPLATE WINDOWS#
I recommend reading the following MSPress books on PKI and Certificate Services before implementing a Windows PKI, or any PKI for that matter. When implementing a PKI planning is the most important phase, and you can prevent a lot of issues by properly planning your PKI implementation. In Part I, I will cover design considerations, and planning for deploying a PKI.

First published on TechNet on Sep 01, 2009ĭesigning and Implementing a PKI: Part I Design and Planningĭesigning and Implementing a PKI: Part II Implementation Phases and Certificate Authority Insta.ĭesigning and Implementing a PKI: Part III Certificate Templatesĭesigning and Implementing a PKI: Part IV Configuring SSL for Web Enrollment and Enabling Key A.ĭesigning and Implementing a PKI: Part V Disaster RecoveryĬhris here again.
