windows2000csoverview.doc

Operating System
Windows 2000 Certificate Services
White Paper
Abstract
Microsoft® Windows® 2000 Certificate Services offers customers an integrated public key infrastructure (PKI) that enables the secure exchange of information across the , s, and s. Certificate Services verifies and authenticates the validity of each party involved in an electronic transaction and lets domain users log on to a domain using the additional security provided by smart cards. This paper introduces Windows 2000 Certificate Services and describes PKI deployment in a Windows work.
© 2000 Microsoft Corporation. All rights reserved.
The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be mitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.
This white paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT.
Microsoft, MSN, Active Directory, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
Other product pany names mentioned herein may be the trademarks of their respective owners.
Microsoft Corporation • One Microsoft Way • Redmond, WA 98052-6399 • USA
03/00
Contents
Introduction 1
Certificate Services 2
Windows 2000 Certificate Services Overview 2
Windows 2000 CA Policies 2
Enterprise CA 5
Stand-alone CA 7
Certificate Revocation Lists 8
Where CA Information is Published in Active Directory 9
Web-Based Enrollment 10
CA Certificate Distribution 10
CA Renewal 11
Related Issues 13
Export Regulations 13
Server Gated Cryptography (SGC) Certificates 13
Third-Party Cryptographic Service Provider (CSP) Support 15
PKI Design and Deployment in Windows 2000 17