Flashcards
Security Fina
Cards in this deck (20)
- 1An electronic document that associates credentials with a public key.Digital Certificate
- 2A server issues certificates and the associated public/private key pairs.Certificate Authority
- 3A system that is composed of a CA, certificates, software, services, and other cryptographic components, for the purpose of enabling authenticity and validation of data and entities.Public Key Infrastructure (PKI)
- 4Responsible for verifying users' identities and approving or denying requests for digital certificates.Registration Authority (RA)
- 5Stores digital certificatesCertificate Repository Database
- 6Provides software tools to perform the day-to-day functions of the PKICertificate Management System
- 7A message sent to a CA in which a resource applies for a certificateCertificate Signing Request (CSR)
- 8Most common CSR format to send info over the Internet in a secure manner using a PKI.Public Key Cryptography Standards (PKCS)
- 9A single CA or group of CAs that work together to issue digital certificates.CA Hierarchy or Trust Model
- 10Topmost CA, most trusted. Can be public or private.Root CA
- 11Below the Root in the hierarchy.Subordinate CA
- 121 entity requests cert 2 RA authenticates entity 3 policy applied to request 4 request sent to CA 5 CA issues cert 6 entity notified 7 cert installedThe Certificate Enrollment Process
- 131 issuance 2 enrollment 3a renewal 3b revocation 3c expiration 3d suspensionCertification Life Cycle Phase
- 141 request 2 response 3 negotiation 4 encryption 5 communicationSSL Enrollment Process
- 15An alternative to key backups, can be used to store private keys securely, while allowing one or more trusted third parties access to the keys under predefined conditions.Key Escrow
- 16NTFS-based public Key encryption.Encrypting File System (EFS)
- 17An individual who has the necessary credentials to recover files that were encrypted by another user.EFS Recovery Agent
- 18A list of certificates that were revoked before the expiration date.Certificate Revocation List (CRL)
- 19A HTTP-based alternative to a CRL for checking the status of revoked certificates.Online Certificate Status Protocol (OCSP)
- 20—
Information
- Description
- Flashcards on Security Fina, created by Abel Zutler on 09/11/2016.
- Created by
- Abel Zutler · Nov 2016
- Updated
- Jan 14, 2017
- Views
- 0
- Rating