Index

A

accelerators, Tokens for Storing Certificate System Subsystem Keys and Certificates
administrators
tools provided
Certificate System console, The Java Administrative Console for CA, OCSP, KRA, and TKS Subsystems
agent certificate, User Certificates
agents
authorizing key recovery, Recovering Keys
port used for operations, Planning Ports
algorithm
cryptographic, Encryption and Decryption
authentication
certificate-based, Certificate-Based Authentication
client and server, Authentication Confirms an Identity
password-based, Password-Based Authentication
See also client authentication, Certificate-Based Authentication
See also server authentication, Certificate-Based Authentication

C

CA
certificate, Types of Certificates
defined, A Certificate Identifies Someone or Something
hierarchies and root, CA Hierarchies
trusted, How CA Certificates Establish Trust
CA chaining, Linked CA
CA decisions for deployment
CA renewal, Renewing or Reissuing CA Signing Certificates
distinguished name, Planning the CA Distinguished Name
root versus subordinate, Defining the Certificate Authority Hierarchy
signing certificate, Setting the CA Signing Certificate Validity Period
signing key, Choosing the Signing Key Type and Length
CA hierarchy, Subordination to a Certificate System CA
root CA, Subordination to a Certificate System CA
subordinate CA, Subordination to a Certificate System CA
CA scalability, CA Cloning
CA signing certificate, CA Signing Certificates, Setting the CA Signing Certificate Validity Period
Certificate Manager
as root CA, Subordination to a Certificate System CA
as subordinate CA, Subordination to a Certificate System CA
CA hierarchy, Subordination to a Certificate System CA
CA signing certificate, CA Signing Certificates
chaining to third-party CAs, Linked CA
cloning, CA Cloning
KRA and, Planning for Lost Keys: Key Archival and Recovery
Certificate System console
Configuration tab, The Java Administrative Console for CA, OCSP, KRA, and TKS Subsystems
Status tab, The Java Administrative Console for CA, OCSP, KRA, and TKS Subsystems
certificate-based authentication
defined, Authentication Confirms an Identity
certificates
authentication using, Certificate-Based Authentication
CA certificate, Types of Certificates
chains, Certificate Chains
contents of, Contents of a Certificate
issuing of, Certificate Issuance
renewing, Certificate Expiration and Renewal
revoking, Certificate Expiration and Renewal
S/MIME, Types of Certificates
self-signed, CA Hierarchies
verifying a certificate chain, Verifying a Certificate Chain
ciphers
defined, Encryption and Decryption
client authentication
SSL/TLS client certificates defined, Types of Certificates
cloning, CA Cloning
Configuration tab, The Java Administrative Console for CA, OCSP, KRA, and TKS Subsystems
CRL signing certificate, Other Signing Certificates
CRLs
Certificate Manager support for, CRLs
publishing to online validation authority, OCSP Services

D

deployment planning
CA decisions
distinguished name, Planning the CA Distinguished Name
root versus subordinate, Defining the Certificate Authority Hierarchy
signing certificate, Setting the CA Signing Certificate Validity Period
signing key, Choosing the Signing Key Type and Length
token management, Smart Card Token Management with Certificate System
digital signatures
defined, Digital Signatures
distinguished name (DN)
for CA, Planning the CA Distinguished Name

E

email, signed and encrypted, Signed and Encrypted Email
encryption
defined, Encryption and Decryption
public-key, Public-Key Encryption
symmetric-key, Symmetric-Key Encryption
Enterprise Security Client, Enterprise Security Client
extensions
structure of, Structure of Certificate Extensions
external tokens
defined, Tokens for Storing Certificate System Subsystem Keys and Certificates

H

hardware accelerators, Tokens for Storing Certificate System Subsystem Keys and Certificates
hardware tokens, Tokens for Storing Certificate System Subsystem Keys and Certificates
See external tokens, Tokens for Storing Certificate System Subsystem Keys and Certificates
how to search for keys, Archiving Keys

I

installation, Installing and Configuring Certificate System
planning, A Checklist for Planning the PKI
internal tokens, Tokens for Storing Certificate System Subsystem Keys and Certificates

K

key archival, Archiving Keys
how it works, Archiving Keys
how keys are stored, Archiving Keys
PKI setup required, Archiving, Recovering, and Rotating Keys
reasons to archive, Archiving Keys
where keys are stored, Archiving Keys
key length, Choosing the Signing Key Type and Length
key recovery, Recovering Keys
keys
defined, Encryption and Decryption
management and recovery, Key Management
KRA
Certificate Manager and, Planning for Lost Keys: Key Archival and Recovery

L

linked CA, Linked CA

O

OCSP responder, OCSP Services
OCSP server, OCSP Services
OCSP signing certificate, Other Signing Certificates

P

password
using for authentication, Authentication Confirms an Identity
password-based authentication, defined, Password-Based Authentication
PKCS #11 support, Tokens for Storing Certificate System Subsystem Keys and Certificates
planning installation, A Checklist for Planning the PKI
ports
for agent operations, Planning Ports
how to choose numbers, Planning Ports
private key, defined, Public-Key Encryption
public key
defined, Public-Key Encryption
management, Key Management
publishing
of CRLs
to online validation authority, OCSP Services

R

recovering users' private keys, Recovering Keys
root CA, Subordination to a Certificate System CA
root versus subordinate CA, Defining the Certificate Authority Hierarchy
RSA, Choosing the Signing Key Type and Length

S

S/MIME certificate, Types of Certificates
self-signed certificate, CA Hierarchies
signing certificate
CA, Setting the CA Signing Certificate Validity Period
signing key, for CA, Choosing the Signing Key Type and Length
SSL/TLS
client certificates, Types of Certificates
SSL/TLS client certificate, SSL/TLS Server and Client Certificates
SSL/TLS server certificate, SSL/TLS Server and Client Certificates
Status tab, The Java Administrative Console for CA, OCSP, KRA, and TKS Subsystems
subordinate CA, Subordination to a Certificate System CA

T

Token Key Service, Smart Card Token Management with Certificate System
Token Processing System and, Smart Card Token Management with Certificate System
Token Management System
Enterprise Security Client, Enterprise Security Client
Token Processing System, Smart Card Token Management with Certificate System
scalability, Using Smart Cards
Token Key Service and, Smart Card Token Management with Certificate System
tokens
defined, Tokens for Storing Certificate System Subsystem Keys and Certificates
external, Tokens for Storing Certificate System Subsystem Keys and Certificates
internal, Tokens for Storing Certificate System Subsystem Keys and Certificates
viewing which tokens are installed, Viewing Tokens
topology decisions, for deployment, Smart Card Token Management with Certificate System
transport certificate
when used, Archiving Keys
trusted CA, defined, How CA Certificates Establish Trust

U

user certificate, User Certificates