Course Summary

A Public Key Infrastructure (PKI) is an increasingly critical component to ensure confidentiality, integrity, and authentication in an enterprise. This course provides the knowledge and skills necessary to select, design and deploy a PKI to secure existing and future applications within your organization. It also provides an in-depth look into the foundations of cryptography and the working principles of the algorithms used.

During training, participants will gain in-depth knowledge on the following topics:

• Trust in a digital world
• Elements of a PKI
• Trust models
• PKI management
• Legal aspects of a PKI
• Digital signature implementation

After completing the PKI course, you will be able to successfully design, setup, deploy, and manage a PKI.

Table of Contents

1) Trust in a Digital World

1.1 Trust and security concerns in e-Business
1.2 Why PKI is getting a second chance
1.3 Review
1.4 Training explanation

2) Foundations of Cryptography

2.1 Introduction
2.2 Information assurance issues
2.3 Approaches to cryptography
2.4 Public Key cryptography functions
2.5 Potential applications of Public Key Cryptography
2.6 Key distribution and management

3) Elements of PKI

3.1 Infrastructure concepts and PKI services overview
3.2 X.509 certificates and certificate revocation Lists
3.3 PKI architecture model
3.4 PKI standards
3.5 PKI client software

4) Trust Models

4.1 Introduction
4.2 Hierarchical trust model
4.3 Distributed trust model
4.4 Bridge CA
4.5 Bridge VA
4.6 Other approaches
4.7 Linking PKIs

5) Managing a PKI

5.1 Introduction
5.2 Policy approval authority as managerial body
5.3 Policy and administration
5.4 Managing the different dimensions
5.5 Review

6) Legal Aspects

6.1 Introduction
6.2 Encryption-related regulations
6.3 Electronic signature laws and regulations
6.4 European directive focus
6.5 Legal and technical requirements: sometimes a difficult combination

7) Pulling It All Together

7.1 Defining your PKI security objectives
7.2 Defining your PKI required services: design principles
7.3 Determining PKI ROI

8) Focus on Digital Signatures

8.1 Electronic signatures: an e-revolution
8.2 Implementing electronic signatures
8.3 Review

9) Recent Developments

9.1 Large scale PKI and impact on the industry and public
9.2 Identity-based certificates versus functional certificates
9.3 Review

10) PKI Uses

10.1 Basic PKI principles
10.2 DIGIPASS 860 hybrid PKI device
10.3 Email signing and encryption
10.4 Diffie-Hellman algorithm for secret keys
10.5 PKI in enterprise
10.6 PKI in e-commerce
10.7 PKI in electronic banking
10.8 PKI in healthcare
10.9 PKI in registered email
10.10 PKI in e-procurement
10.11 PKI in e-government
10.12 Conclusion

11) PKI Demonstration

11.1 The certificate store
11.2 Import and export of dertificates
11.3 SSL demonstration
11.4 Signing a document electronically
11.5 Electronic signature validation
11.6 Certification practice statement (CPS)
11.7 Certification revocation list
11.8 Conclusion

SEAL - PKI In-Depth Brochure (download)