+ All Categories
Home > Documents > Public Key Infrastructure at Microsoft

Public Key Infrastructure at Microsoft

Date post: 07-Apr-2018
Category:
Upload: deepak-gupta-dg
View: 225 times
Download: 0 times
Share this document with a friend
39
8/4/2019 Public Key Infrastructure at Microsoft http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 1/39  Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni : Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f}  ]idalhdjb ^ah}i Ujuis @shnhljbbx Uycbhtaim; Ficsyjsx 3559 Yumj}im; Tiu}iocis 35::
Transcript
Page 1: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 1/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :

Miub̀ xhln jlm Ojljnhln UGHHlthmi Ohds̀ t f̀} 

]idalhdjb ^ah}i Ujuis@shnhljbbx Uycbhtaim; Ficsyjsx 3559

Yumj}im; Tiu}iocis 35::

Page 2: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 2/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 3

D@L]IL]T 

Iqidy}hvi Tyoojsx ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, = Hl}s`myd}h`l ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 9 Hlh}hjb UGH Miub`xoil} ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 6 Dajlnit }` }ai Oyb}h/]his T}syd}ysi ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 8 Tidysh}x Sizyhsioil}t ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, :: 

Us`}id}h`l `f DJ Ushvj}i Gixt :: Uaxthdjb Tidysh}x :3 Li}~`sg" Tisvis" jlm Mhsid}`sx Tidysh}x :3 

Hlt}jbbj}h`l jlm Houbioil}j}h̀ l D`lthmisj}h`lt ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, := DSB" JHJ" jlm Dis}hfhdj}i ]ioubj}i D`lthmisj}h`lt := DSB Uycbhdj}h`l := DSB Bhfi}hoi :9 

UGH/Iljcbim Tisvhdit ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, :> Tojs} Djsmt f`s Li}~`sg Jdditt :> Tojs} Djsm Hlfsjt}syd}ysi ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, :1 Mibinj}im Httyjldi ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, :1 Tojs} Djsm Sili~jb ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, :8 HUtid :8 IFT 35 TOHOI 35 Gix Jsdahvjb jlm Sid`visx 3: Gix Sid`visx Jnil}t ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 3: Miuilmildhit ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 33 TTB 33 ^hsibitt 34 LJU 3= 

Us`myd} Yumj}it jlm Jtt`dhj}im Hlfsjt}syd}ysi Dajlnit ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 36 Ds`tt/F`sit} Ils`bboil} jlm Tisvis D`lt`bhmj}h`l 36 Ni`nsjuahdjbbx Mhtcystim UGH 3> Mhtjt}is Sid`visx 31 

Page 3: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 3/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 4

DJ Tisvis Ojljnioil} jlm Tyuu`s} ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 45 Cjdgyu 45 O`lh}`shln 45 T`f}~jsi Yumj}it 4: Ajsm~jsi Yunsjmit 4: 

Yud`ohln Hlh}hj}hvit ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 43 Bitt`lt Bijslim jlm Cit} Usjd}hdit ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 44 

Ubjl f`s Fy}ysi Yunsjmit }` }ai ^hlm`~t Tisvis UGH 44 Djsifybbx D`lthmis }ai Lyocis `f DJ Tisvist Liimim 44 D`lthmis Hl}insj}h`l ~h}a j Uycbhd S``} 44 Jy}`oj}i DSB Uycbhdj}h`l 4= Dyt}`oh{i }ai DSB Uycbhdj}h`l @visbju Hl}isvjb 4= Yti Li~ Gixt f`s DJ Sili~jb 4= Ubjl f`s Dis}hfhdj}i Httyjldi U`bhdhit 49 Tjlh}h{i Ibioil}t `f }ai UGH 46 Iltysi Tisvhdi Jvjhbjchbh}x f`s Ahna/Miojlm Juubhdj}h`lt 46 Yti Ajsm~jsi Tidysh}x O`mybit 46 Ajvi j Dbijsbx Mifhlim U`bhdx 46 

D`ldbyth`l ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 41 F`s O`si Hlf`soj}h`l ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, 48 

Page 4: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 4/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni =

IQIDY]HVI TYOOJSX 

Ojlx `f }ai }idalhzyit jlm us`myd}t jvjhbjcbi }` aibu tidysi jl il}isushti li}~`sg sibx `l

t`oi f`so `f dsxu}`nsjuax, J uycbhd gix hlfsjt}syd}ysi !UGH( us`vhmit }ai dis}hfhdj}it ytim cx

ijda ujs}x hlv`bvim hl j dsxu}`nsjuahdjbbx tidysim ibid}s`lhd }sjltjd}h`l, ]` aibu tidysi }ai

Ohds`t`f} d`su`sj}i li}~`sg jlm dis}hfx h}t t`f}~jsi" Ohds`t`f} Hlf`soj}h`l ]idal`b`nx

!Ohds`t`f} H]( liimim }` houbioil} tivisjb hlh}hj}hvit }aj} sizyhsim dsxu}`nsjuahd }idalhzyit,]`mjx" }aiti hlh}hj}hvit hldbymi;

  Dis}hfhdj}i/cjtim 153,:Q ~hsibitt jy}ail}hdj}h`l,

  Tojs} djsmt f`s }~`/fjd}`s sio`}i jdditt jy}ail}hdj}h`l,

  Tidysi Oyb}huysu`ti Hl}isli} Ojhb Iq}ilth`lt !TOHOI( f`s mhnh}jbbx thnlhln jlm

ildsxu}hln iojhb,

  Ildsxu}hln Fhbi Txt}io !IFT( f`s fhbi jlm f`bmis ildsxu}h`l,

  Hl}isli} Us`}`d`b tidysh}x !HUtid( f`s }ai tidysh}x `f li}~`sg }sjltjd}h`lt,

  Tidysi T`dgi}t Bjxis !TTB( f`s }ai tidysh}x `f ~ic d`llid}h`lt,

  Li}~`sg Jdditt Us`}id}h`l !LJU( f`s ilf`sdhln txt}io aijb}a,

]aiti hlh}hj}hvit sizyhsim }ai usitildi `f jl il}isushti/~hmi UGH }` us`vhmi uycbhd gix —

cjtim tidysh}x tisvhdit,

Syllhln h}t `~l dis}hfhdj}h`l jy}a`sh}hit !DJt( sj}ais }ajl ythln d`ooisdhjb" l`l/Ohds`t`f}

tisvhdit iljcbim Ohds`t`f} H] }` o`si tidysibx ojljni }ai hlfsjt}syd}ysi jlm simydi }ai

d`t}t jtt`dhj}im ~h}a httyhln dis}hfhdj}it jlm ojljnhln jl iq}isljb DJ sibj}h`ltahu,

Houbioil}hln jl il}isushti UGH iljcbim Ohds`t`f} H] }` ci}}is tidysi h}t li}~`sg/cjtim

d`ooylhdj}h`lt,

Ohds`t`f} H].t ijtx/}`/ojljni" t}jlmjsmt/cjtim" tdjbjcbi UGH t`by}h`l sityb}im hl j oi}a`m

}` iqdajlni tilth}hvi mj}j" d`ouj}hchbh}x ~h}a `}ais Ohds`t`f} juubhdj}h`lt" jlm b`~is

hlfsjt}syd}ysi d`t}t,

]aht ~ah}i ujuis mitdshcit }ai us`myd}h`l miub`xoil} jlm yti `f }ai UGH fij}ysit jvjhbjcbihl }ai ^hlm`~t Tisvis 3551 jlm ^hlm`~t Tisvis 3551 S3 `uisj}hln txt}iot, ]aht ~ah}i

ujuis jbt` `ffist bitt`lt bijslim jlm cit} usjd}hdit" jlm h} hldbymit j mhtdytth`l `l }ai

fy}ysi mhsid}h`lt `f }ai }idal`b`nx j} Ohds`t`f}, H} jttyoit }aj} sijmist jsi }idalhdjb

midhth`l ojgist jlm jsi jbsijmx fjohbhjs ~h}a }ai fylmjoil}jbt `f uycbhd gix dsxu}`nsjuax

txt}iot" }ai cilifh}t }aj} tyda txt}iot `ffis" jlm }ai d`ou`lil}t sizyhsim }` houbioil}

}a`ti txt}iot, Bhlgt }` jmmh}h`ljb t`ysdit `f hlf`soj}h`l jc`y} UGH jsi jvjhbjcbi hl }ai #F`s

O`si Hlf`soj}h`l# tid}h`l j} }ai ilm `f }aht ujuis,

]aht ujuis" fhst} uycbhtaim hl Kyli 3559 jlm yumj}im hl Tiu}iocis 35::" sifbid}t }ai

miub`xoil} `f li~ Ohds`t`f} us`myd}t ~h}ahl }ai d`su`sj}i hlfsjt}syd}ysi jlm mitdshcit

jtt`dhj}im hlfsjt}syd}ysi dajlnit,

L`}i; F`s tidysh}x sijt`lt" }ai tjoubi ljoit `f f`sit}t" m`ojhlt" hl}isljb sit`ysdit"

`snjlh{j}h`lt" jlm hl}isljbbx mivib`uim tidysh}x fhbi ljoit ytim hl }aht ujuis m` l`} 

siusitil} sijb sit`ysdi ljoit ytim ~h}ahl Ohds`t`f} jlm jsi f`s hbbyt}sj}h`l uysu`tit `lbx,

Th}yj}h`l

Ohds`t`f} H] liimim j ubj}f`so }` aibu

tidysi li}~`sg d`ooylhdj}h`lt" aibu

us`}id} mj}j !c`}a j} sit} jlm hl

}sjlth}(" jlm dis}hfx hl}isljb d`mi,

T`by}h`lOhds`t`f} H] miub`xim Dis}hfhdj}i

Tisvhdit hl ̂ hlm`~t Tisvis 3554"

jlm Jd}hvi Mhsid}`sx Dis}hfhdj}i

Tisvhdit hl ̂ hlm`~t Tisvis 3551 jlm

^hlm`~t Tisvis 3551 S3" }`

houbioil} jl hlfsjt}syd}ysi f`s

ildsxu}im d`ooylhdj}h`lt" tidysh}x/

ilajldim sio`}i jy}ail}hdj}h`l" jlm

t`f}~jsi vjbhmj}h`l,

Cilifh}t

Iljcbim t}s`ln li}~`sg ytis

jy}ail}hdj}h`l cx ythln tojs} djsmt

Aibuim us`}id} iojhb

d`ooylhdj}h`lt cx ythln TOHOI Hous`vim tidysh}x ̀ f ̂ ic

d`llid}h`lt cx ythln TTB ̀ s ]BT

Aibuim iltysi }ai d`lfhmil}hjbh}x ̀ f

t}`sim mj}j cx ythln IFT

Aibuim iltysi }ai d`lfhmil}hjbh}x

jlm hl}insh}x ̀ f }sjltoh}}im mj}j cx

houbioil}hln HUtid

Ilf`sdim txt}io aijb}a cx ythln

LJU

Us`myd}t & ]idal`b`nhit

^hlm`~t Tisvis 3551

^hlm`~t Tisvis 3551 S3

^hlm`~t/cjtim UGH jlm DJ

Dis}hfhdj}i Tisvhdit jlm Jd}hvi

Mhsid}`sx Dis}hfhdj}i Tisvhdit

Tojs} djsmt

IFT

HUtid

TOHOI

TTB

LJU

Page 5: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 5/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 9

HL]S@MYD]H@L 

]ai dajs}is `f Ohds`t`f} H] ht }` ojhl}jhl jl H] ilvhs`loil} d`ou`tim `f tisvhdit"

juubhdj}h`lt" jlm jl hlfsjt}syd}ysi }aj} us`vhmit jvjhbjchbh}x" ushvjdx" jlm tidysh}x }` Ohds`t`f}

ioub`xiit hl o`si }ajl =55 b`dj}h`lt ~`sbm~hmi, Ohds`t`f} H] ht situ`lthcbi f`s syllhln }ai

d`oujlx.t hl}isljb li}~`sgt" }ibid`ooylhdj}h`l txt}iot" d`su`sj}i tisvist" jlm jbb bhli/`f/

cythlitt juubhdj}h`lt, Hl jmmh}h`l" Ohds`t`f} H] ht d`ooh}}im }` }it}hln Ohds`t`f} il}isushtius`myd}t hl j us`myd}h`l ilvhs`loil} cif`si }aix jsi sibijtim }` }ai uycbhd jlm us`vhmhln

fiimcjdg }` }ai us`myd} mivib`uoil} ns`yut cx cihln }aihs fhst} jlm cit} dyt}`ois,

Dyssil}bx" }ai tisvis hlfsjt}syd}ysi j} Ohds`t`f} d`ltht}t `f tisvist syllhln ^hlm`~t

Tisvis 3551 jlm ^hlm`~t Tisvis 3551 S3, Tidysh}x d`l}hlyit }` ci j} }ai ahnait} bivib `f

ush`sh}x jds`tt jbb jsijt `f us`myd} mivib`uoil} j} Ohds`t`f} jlm ~h}ahl }ai d`su`sj}i

hlfsjt}syd}ysi, Cx houbioil}hln jl il}isushti UGH" Ohds`t`f} H] djl yti t}jlmjsmt/cjtim

dsxu}`nsjuahd }idal`b`nhit }` aibu tidysi }ai Ohds`t`f} d`su`sj}i li}~`sg jlm h}t mj}j,

Page 6: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 6/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 6

HLH]HJB UGH MIUB@XOIL] 

]ai fhst} UGH ahisjsdax j} Ohds`t`f} ~jt hl}s`mydim hl Ficsyjsx 3555 jlm d`ltht}im `f }asii

}hist; `li t}jlm/jb`li `ffbhli s``} DJ7 }~` t}jlm/jb`li hl}isoimhj}i DJt7 jlm oyb}hubi

tuidhjbh{im" `lbhli il}isushti httyhln DJt,

]ai `ffbhli s``} jlm }~` hl}isoimhj}it fyld}h`lim jt f`bb`~t;

  Ohds`t`f} D`su`sj}i S``} DJ, ]aht DJ ~jt }ai s``} `f }ai d`su`sj}i UGH ahisjsdax, H}t

`lbx uysu`ti ~jt }` httyi `s siv`gi }ai dis}hfhdj}it `f }ai }~` `ffbhli hl}isoimhj}i DJt,

  Ohds`t`f} Hl}isoimhj}i Hl}sjli} DJ, ]aht `ffbhli hl}isoimhj}i DJ dis}hfhim jbb `}ais DJt

ytim }` httyi dis}hfhdj}it hl}ilmim f`s yti `lbx ~h}ahl }ai c`ylmt `f }ai Ohds`t`f}

d`su`sj}i li}~`sg ilvhs`loil},

  Ohds`t`f} Hl}isoimhj}i Iq}sjli} DJ, ]aht `ffbhli hl}isoimhj}i DJ dis}hfhim jbb `}ais

DJt ytim }` httyi dis}hfhdj}it hl}ilmim f`s yti `y}thmi }ai c`ylmt `f }ai Ohds`t`f}

d`su`sj}i li}~`sg" hldbymhln }ai Hl}isli} jlm }ai Ohds`t`f} iq}sjli} ilvhs`loil},

]aisi ~jt l` tyuu`s} f`s ds`tt/f`sit} ils`bboil}7 }aisif`si" ijda f`sit} sizyhsim h}t `~l ti}

`f il}isushti DJt, A`~ivis" ijda f`sit} ytim }ai tjoi `ffbhli t}jlm/jb`li s``} jlm

hl}isoimhj}i DJt,

Jbb }ai il}isushti httyhln DJt ~isi tyc`smhlj}i }` }ai hl}isoimhj}i DJt, ]jcbi : mi}jhbt }ai

fyld}h`l `f ijda httyhln il}isushti DJ hl }ai ahisjsdax,

]jcbi :, ]xuit `f @lbhli Il}isushti Httyhln DJt Hlh}hjbbx Miub`xim

]xui `f DJ Fyld}h`l

Hl}sjli} Li}~`sg Httyim dis}hfhdj}it f`s li}~`sg/~hmi tisvhdit }aj} sibj}im }` nilisjb tisvis"

ytis" ̀ s li}~`sg jmohlht}sj}h`l" tyda jt jl ils`bboil} jnil} jlm IFT mj}j

sid`visx

Hl}sjli} D`ouy}is Httyim jy}ail}hdj}h`l jlm HUtid dis}hfhdj}it f`s d`ouy}is jdd`yl}t"

hldbymhln m`ojhl d`l}s`bbist

F]I Ytis Httyim ytis/cjtim dis}hfhdj}it f`s fybb/}hoi Ohds`t`f} ioub`xiit ̀ l }aid`su`sj}i li}~`sg f`s nilisjb dbhil} jy}ail}hdj}h`l jlm IFT

L`l/F]I Ytis Httyim dis}hfhdj}it f`s }iou`sjsx d`l}sjd} jlm vilm`s t}jff ytist ̀ l }ai

d`su`sj}i li}~`sg f`s nilisjb dbhil} jy}ail}hdj}h`l jlm IFT

Hl}sjli} Bivib 3 Ytis Httyim dis}hfhdj}it f`s fybb/}hoi Ohds`t`f} ioub`xii ytist f`s tojs} djsm

b`n`l

Uist`llib I/Ojhb Httyim dis}hfhdj}it f`s TOHOI mhnh}jb thnlj}ysit jlm ildsxu}h`l tisvhdit

Iq}sjli} D`ouy}is Httyim dis}hfhdj}it f`s d`ouy}ist ̀ y}thmi }ai d`su`sj}i li}~`sg" tyda jt

~ic tisvist jlm cythlitt ujs}lis txt}iot

Fhnysi : ta`~t }ai ahisjsdax `f DJt hl }ai hlh}hjb ushojsx UGH mithnl }aj} Ohds`t`f} H]dsij}im, J tidysi" Ohds`t`f} H] —d`l}s`bbim vjyb} a`ytim jbb `f }ai DJt,

Page 7: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 7/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni >

Fhnysi :, @shnhljb UGH ahisjsdax

]ai t}jlm/jb`li" `ffbhli s``} thnlim }ai `ffbhli hl}isoimhj}i DJt, ]ail" }ai `ffbhli

hl}isoimhj}it thnlim }ai `lbhli il}isushti tyc`smhlj}i DJt, ]ai `lbhli il}isushti DJt ~isi

}ai httyhln DJt f`s jbb dis}hfhdj}it httyim hl}isljbbx j} Ohds`t`f},

Ohds`t`f} H] mifhlim }ai s``} dis}hfhdj}i ~h}a j :6/xijs DJ dis}hfhdj}i bhfi}hoi" j ="586/ch} STJ

gix" jlm j 85/mjx Dis}hfhdj}i Siv`dj}h`l Bht} !DSB( uycbhtahln hl}isvjb, ]ai DSB ~jt

uycbhtaim }` jl iq}isljb Axuis}iq} ]sjltfis Us`}`d`b !A]]U( uj}a jlm hl }ai Jd}hvi Mhsid}`sx

mhsid}`sx tisvhdi }as`yna j Bhna}~ihna} Mhsid}`sx Jdditt Us`}`d`b !BMJU( YSB, Ohds`t`f} H]

mifhlim j }~`/xijs DJ bhfi}hoi f`s ijda `f }ai httyhln DJt }aj} ytim 3"5=1/ch} STJ gixt, ]aiDSB uycbhdj}h`l hl}isvjb `l }ai httyhln DJt vjshim" miuilmhln `l }ai fyld}h`l `f }ai

dis}hfhdj}it cihln httyim,

Ilm/il}h}x dis}hfhdj}it ~isi nilisjbbx httyim ~h}a j vjbhmh}x uish`m `f `li xijs `s bitt,

Cidjyti j DJ djll`} httyi j dis}hfhdj}i ~h}a j vjbhmh}x uish`m }aj} iqdiimt }aj} `f h}t `~l

dis}hfhdj}i" }ai dis}hfhdj}it f`s httyhln DJt liimim }` ci sili~im jllyjbbx, ]aht jbb`~im

Page 8: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 8/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 1

httyhln DJt }` d`l}hlyi }` httyi ilm/il}h}x dis}hfhdj}it }aj} ~isi vjbhm f`s }aihs fybb" hl}ilmim

`li/xijs vjbhmh}x uish`m,

Page 9: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 9/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 8

DAJLNIT ]@ ]AI OYB]H/]HIS T]SYD]YSI 

]ai ushojsx sijt`l f`s miub`xhln }ai }asii/}his ahisjsdax ~jt }ai hl}ilmim tiujsj}h`l `f

hl}isljbbx ytim dis}hfhdj}it vistyt }a`ti }aj} ~`ybm ci ytim `y}thmi }ai d`oujlx" ~ahda

~`ybm u`}il}hjbbx mshvi }ai liim f`s mhffisil} dis}hfhdj}i u`bhdhit hl jmmh}h`l }` `visjbb tisvhdi

ojljnioil} usjd}hdit, A`~ivis" }ai iqht}hln ushvj}i d`su`sj}i s``} ~jt l`} visx ytjcbi f`s

tidysh}x/ilajldim d`ooylhdj}h`lt `y}thmi }ai Ohds`t`f} d`su`sj}i li}~`sg, Cidjyti }aiOhds`t`f} d`su`sj}i s``} ~jt ylhzyi }` Ohds`t`f}" l` `li `y}thmi Ohds`t`f} }syt}im h} cx

mifjyb}, H} ht dsh}hdjb }aj} dbhil} d`ouy}ist }syt} dis}hfhdj}it" tyda jt }a`ti ytim f`s TTB tisvis

jy}ail}hdj}h`l, Cidjyti `f }aht sizyhsioil}" Ohds`t`f} H] uysdajtim hlmhvhmyjb dis}hfhdj}it f`s

TTB/iljcbim ~icth}it }aj} ~isi hl}ilmim f`s jdditt cx l`l/Ohds`t`f} uist`llib, Ohds`t`f}

H] uysdajtim }aiti dis}hfhdj}it fs`o j uycbhdbx }syt}im l`l/Ohds`t`f} us`vhmis" sj}ais }ajl

httyhln }aio fs`o }ai Ohds`t`f} hl}isljb UGH hlfsjt}syd}ysi,

Jt }ai yti `f hlmhvhmyjb uycbhdbx }syt}im dis}hfhdj}it nsi~" Ohds`t`f} H] f`ylm }aj} uysdajthln

}aiti dis}hfhdj}it ~jt hldsijthlnbx iquilthvi, ]ai yti `f TOHOI ~jt jbt` hldsijthln,

TOHOI dis}hfhdj}it ~isi jbb httyim cx DJt }aj} dajhlim }` }ai Ohds`t`f} d`su`sj}i s``}, ]`

fjdhbh}j}i ytjni `f }aiti dis}hfhdj}it `y}thmi }ai Ohds`t`f} d`su`sj}i li}~`sg" iq}isljb

sidhuhil}t liimim }` ojlyjbbx hlt}jbb }ai Ohds`t`f} D`su`sj}i S``} dis}hfhdj}i, ]aht us`ditt

jlm }ai ytis imydj}h`l js`ylm h} us`vim }` ci bjc`sh`yt, Ohds`t`f} H] liimim }` hldbymi }ai

jsdah}id}ysi `f j uycbhd s``} ahisjsdax hl h}t UGH hlfsjt}syd}ysi f`s iq}isljb tidysh}x

sizyhsioil}t" t` }aj} jbb ujs}hit d`ybm jdgl`~bimni }aj} }aix }syt}im }ai s``} `f }ai dis}hfhdj}i

dajhl,

Sj}ais }ajl d`l}hlyi }` cyx ijda ilm/il}h}x dis}hfhdj}i hlmhvhmyjbbx fs`o j }syt}im l`l/

Ohds`t`f} us`vhmis" Ohds`t`f} H] midhmim }` dsij}i j tid`lm" hlmiuilmil} UGH hlfsjt}syd}ysi

cx tyc`smhlj}hln h}t `~l `ffbhli hl}isoimhj}i DJ }` }aj} `f j uycbhdbx }syt}im s``} DJ,

Ohds`t`f} H] jnsiim }` ujx N]I Dxcis]syt}" Hld," jl jllyjb fii f`s tyc`smhlj}hln j Ohds`t`f}

DJ ylmis }ai N]I Dxcis]syt} S``} jlm N]I Dxcis]syt} Nb`cjb S``}, Thldi :881" c`}a `f

}aiti s``} dis}hfhdj}it ajvi tahuuim jt }syt}im s``}t hl Ohds`t`f} `uisj}hln txt}iot jlm j

vjshi}x `f l`l/Ohds`t`f} `uisj}hln txt}iot, ]ai N]I Dxcis]syt} s``}t us`vhmim }ai ychzyh}x

}aj} Ohds`t`f} liimim }` tj}htfx h}t uycbhd }syt} liimt f`s c`}a TTB jlm TOHOI,

^h}a }aht li~ o`mib" }ai l`l/Ohds`t`f} us`vhmis ajlmbit jbb `f }ai httyjldi jlm siv`dj}h`l

liimt f`s }ai li~ hl}isoimhj}i DJ, Ohds`t`f} H] t}jff d`l}hlyit }` `~l jlm ojljni jbb }ai

hl}isljbbx ojljnim DJt, ]aiti li~ mivib`uoil}t linj}im }ai liim }` si}jhl }ai `shnhljb

hl}sjli} jlm iq}sjli} `ffbhli hl}isoimhj}i DJt" f`s }aj} sijt`l Ohds`t`f} H] ojmi j midhth`l }`

si}hsi }aio,

Fhnysi 3 miuhd}t }ai ahisjsdahdjb dajlnit jf}is Ohds`t`f} H] jm`u}im j uycbhdbx }syt}im s``}

o`mib,

Page 10: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 10/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :5

Fhnysi 3, @shnhljb ahisjsdax" o`mhfhim f`s l`l/Ohds`t`f} s``}

Page 11: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 11/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni ::

TIDYSH]X SIZYHSIOIL]T 

Ivil }a`yna }ai Ohds`t`f} hl}isljb ahisjsdax l` b`lnis ajt }ai usivh`yt hl}isoimhj}i DJt"

Ohds`t`f} H] mhm l`} b`~is jlx `f }ai iqht}hln tidysh}x d`l}s`bt ~ail h} dsij}im }ai li~

ahisjsdax, ]ai s``} jlm }ai li~ hl}isoimhj}i DJ jsi `ffbhli jlm livis iqu`tim }` li}~`sg

}sjffhd" }aisicx ohlhoh{hln }ai dajldi `f j d`ous`ohti, Cidjyti }aiti DJt jsi `ffbhli"

Ohds`t`f} H] tidysh}x t}jff ojlyjbbx httyit jlm uycbhtaim }aihs dis}hfhdj}it !}as`yna j u`s}jcbioimhyo( }` Jd}hvi Mhsid}`sx M`ojhl Tisvhdit !JM MT(, Jmmh}h`ljbbx" }ai tidysh}x t}jff httyit

dis}hfhdj}it }` jbb `lbhli il}isushti DJt hl }ai juus`ushj}i JM MT f`sit} cx ojlyjbbx d`uxhln

dis}hfhdj}i sizyit} fhbit fs`o }ai `lbhli tisvist }` }ai `ffbhli s``}t jlm hl}isoimhj}i, ]ai

tidysh}x t}jff ytit }syt}im u`s}jcbi oimhj }` }sjltu`s} }ai dis}hfhdj}it ci}~iil tisvist, ]ai

sizyit}t jsi us`dittim" jlm tidysh}x t}jff }sjltfist }ai httyim dis}hfhdj}it fs`o }ai `ffbhli DJ

cjdg }` }ai il}isushti DJ f`s hlt}jbbj}h`l,

]` midhmi `l }ai tidysh}x sizyhsim f`s j DJ" Ohds`t`f} H] mi}isohlim }ai shtgt `f j}}jdg `l }ai

DJ hl jmmh}h`l }` }ai d`t}t `f j DJ d`ous`ohti, Ahnais shtgt `f j}}jdgt `l }ai DJ jlm ahnais

d`t}t `f j DJ d`ous`ohti kyt}hfhim ahnais d`t}t f`s tidysh}x oijtysit }` aibu us`}id} }ai DJ,

@ffbhli s``} !jlm tyc`smhlj}i( DJt }xuhdjbbx sizyhsi ahnais bivibt `f us`}id}h`l }ajl httyhln

DJt,

Jf}is ivjbyj}hln }ai shtgt `f jl j}}jdg jlm }ail ~ihnahln }a`ti jnjhlt} }ai d`t} `f tisvhdi

sid`visx" jl `snjlh{j}h`l ta`ybm mi}isohli h}t `~l bivib `f tidysh}x us`}id}h`l f`s h}t DJt"

ituidhjbbx }ai s``} DJ, Tidysh}x us`}id}h`l m`it l`} ajvi }` ci iquilthvi" ituidhjbbx f`s

tojbbis d`oujlhit, ]aisi ohna} ci jmizyj}i us`}id}h`l hl ajvhln }ai `ffbhli s``} DJ hl j

tidysi d`ouy}is djchli} `s ythln sio`vjcbi oimhj }aj} ht t}`sim hl j tjfi,

]ai tid}h`lt }aj} f`bb`~ mitdshci }ai tidysh}x oijtysit }aj} Ohds`t`f} H] }``g hl h}t ^hlm`~t

Tisvis UGH hlfsjt}syd}ysi,

Us`}id}h`l `f DJ Ushvj}i Gixt

Dis}hfhdj}i Tisvhdit hl ^hlm`~t Tisvis 3554”}ai fij}ysi djbbim Jd}hvi Mhsid}`sx Dis}hfhdj}i

Tisvhdit !JM DT( hl ^hlm`~t Tisvis 3551 jlm ^hlm`~t Tisvis 3551 S3”

tahut ~h}a jt`f}~jsi dsxu}`nsjuahd tisvhdi us`vhmis !DTU( }aj} d`oubhit ~h}a }ai Bivib/: sizyhsioil}t `f

Fimisjb Hlf`soj}h`l Us`ditthln T}jlmjsm !FHUT( :=5/3, ]ai `uisj}hln txt}io ojljnit }ai

gix ujhst }aj} jsi nilisj}im cx j t`f}~jsi DTU hl ^hlm`~t Tisvis, ]aht th}yj}h`l iqu`tit j

d`lthmisjcbi shtg hf }ai txt}io ht d`ous`ohtim, ^h}a }aiti gixt" jl j}}jdgis djl si /dsij}i

}ai DJ jlm httyi tiiohlnbx vjbhm dis}hfhdj}it, ]aht ht j }xuhdjb FHUT :=5/3 Bivib/: tidysh}x

shtg" ~ahda jl `snjlh{j}h`l djl oh}hnj}i cx us`vhmhln o`si mhffhdyb} jlm vishfhjcbi uaxthdjb

jdditt }` }ai ^hlm`~t Tisvis —cjtim DJ txt}io,

L`}i; ]ai Lj}h`ljb Hlt}h}y}i `f T}jlmjsmt jlm ]idal`b`nx !LHT]( httyit }ai FHUT t}jlmjsmt 

jlm nyhmibhlit f`s yti ~h}ahl }ai Y,T, fimisjb n`visloil}, FHUT :=5/: mifhlit }ai #Tidysh}x 

Sizyhsioil}t f`s Dsxu}`nsjuahd O`mybit# jt `f Kjlyjsx :88=, FHUT :=5/3 mifhlit }ai tjoi 

}`uhd cy} m`it t` ~h}a o`si t}shlnil} tidysh}x sizyhsioil}t jt `f Kyli 355:, F`s tuidhfhd mifhlh}h`lt `f }ai vjsh`yt tidysh}x bivibt" vhth} }ai LHT] UGH ~icth}i j}  a}}u;dtsd,lht},n`vugh , 

]` us`vhmi t}s`lnis us`}id}h`l `f DJ ushvj}i gixt" Ohds`t`f} H] hlt}jbbim Ajsm~jsi Tidysh}x

O`mybit !ATOt( `l ijda DJ tisvis, Cx ythln tuidhjbh{im" }jouis/sitht}jl} ajsm~jsi }` aibu

us`}id} ushvj}i dsxu}`nsjuahd gixt" ATOt us`vhmi j ahna bivib `f tidysh}x f`s }ai gixt" f`s }ai

DJ" jlm f`s }ai dis}hfhdj}it }aj} }ai DJ thnlt,

Page 12: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 12/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :3

]ai ATOt jsi dis}hfhim f`s FHUT :=5/3 Bivib/4 d`oubhjldi, ]aht ~jt hou`s}jl} hl

it}jcbhtahln j bivib `f }syt} ci}~iil Ohds`t`f} jlm h}t cythlitt ujs}list" hldbymhln }ai Y,T,

n`visloil}, ]ai Ohds`t`f} D`su`sj}i S``} DJ ytit jl ATO d`lfhnysim hl FHUT :=5/3 Bivib/

4 o`mi,

Ijda ATO ht ujs} `f j }syt}im tidysh}x c`ylmjsx" t`oi}hoit sifissim }` jt j #m`ojhl# `s

#tidysh}x ~`sbm,# Ohds`t`f} H] houbioil}im j oyb}hubi/uist`l" oyb}hubi/}`gil o`mib ~aisi l`thlnbi hl}isljb ns`yu ajt fybb d`l}s`b `vis }ai ushvj}i gixt, D`l}s`b `f }ai ushvj}i gixt ht

mhvhmim jo`ln Ohds`t`f} H]" Binjb jlm D`su`sj}i Jffjhst" jlm }ai D`su`sj}i Tidysh}x }ijot,

Jdditt }`gilt jsi mhtuistim jds`tt }ai ns`yut jlm t}`sim tidysibx, Jmmh}h`ljbbx" }ai jdditt

}`gilt jsi t}`sim hl oyb}hubi th}it }` oh}hnj}i j mhtjt}is j} `li th}i,

Ohds`t`f} H] jmaisim }` }ai f`bb`~hln o`mib ~ail dsij}hln ATO tidysh}x c`ylmjshit f`s

vjsh`yt bivibt `f }ai ahisjsdax;

  J s``} tidysh}x c`ylmjsx f`s }ai `ffbhli D`su`sj}i S``} DJ

  Jl httyhln tidysh}x c`ylmjsx }aj} d`l}jhlt jbb `lbhli httyhln DJt

  Jl httyhln tidysh}x c`ylmjsx }aj} d`l}jhlt jbb #sio`}i# DJt”}aj} ht" httyhln DJt }aj}

jsi l`} hl mhsid} uaxthdjb d`l}s`b `f Ohds`t`f} H]

]ai tidysh}x c`ylmjshit us`vhmim j mht}hld}h`l ci}~iil }ai vjsh`yt DJt jlm jmohlht}sj}h`l

jd}hvh}hit, Cx dsij}hln tiujsj}i tidysh}x c`ylmjshit jlm cx ythln }ai ushldhubi `f bijt}

ushvhbini" Ohds`t`f} H] `c}jhlim j nsij}is bivib `f jttysjldi, ]aht bivib `f tidysh}x" hl

d`ochlj}h`l ~h}a t}shlnil} uaxthdjb jdditt" aibut ojhl}jhl j ahna bivib `f jttysjldi

sinjsmhln }ai yti `f }aiti DJt,

Uaxthdjb Tidysh}x

]ai hlh}hjb UGH miub`xoil} ~jt uaxthdjbbx b`dj}im hl j Ohds`t`f} H]/d`l}s`bbim vjyb} }aj}

a`ytim c`}a }ai `ffbhli jlm `lbhli DJt, Ohds`t`f} H] bj}is midhmim }` o`vi }ai hlfsjt}syd}ysi

}` jl il}isushti mj}j dil}is }` }jgi jmvjl}jni `f d`oo`l tyuu`s} us`dittit jlm tidysh}x

d`l}s`bt, Ohds`t`f} H] ubjdim }ai DJ d`ouy}ist hl}` j mimhdj}im tidysh}x djni }aj} ioub`xt j

tishit `f t}shlnil} tidysh}x d`l}s`bt f`s ahnais us`}id}h`l,

Il}sjldi hl}` }ai mj}j dil}is ht bhoh}im }` jy}a`sh{im hlmhvhmyjbt jlm ht d`l}s`bbim cx j bjxisim

ti} `f uaxthdjb jdditt d`l}s`bt" hldbymhln nyjsmt" m``st" cyhbmhln jdditt djsmt" jlm

ch`oi}shdt, Jdditt }` }ai DJ tidysh}x djni ht us`}id}im cx h}t `~l jdditt d`l}s`b bht} !JDB(

~h}a jl jmmh}h`ljb bjxis `f tidysh}x oijtysit,

Li}~`sg" Tisvis" jlm Mhsid}`sx Tidysh}x

JDB d`l}s`b ils`bboil} uisohtth`lt `l c`}a }ai DJ tisvist jlm }ai dis}hfhdj}i }ioubj}it hl

JM MT, Ohds`t`f} H] sit}shd}im }ai httyjldi `f tilth}hvi dis}hfhdj}i }xuit”tyda jt httyjldi

`f tisvis jy}ail}hdj}h`l dis}hfhdj}it" ~ahda vjbhmj}i }ai hmil}h}x `f }ai tisvis d`ouy}is”}`

`lbx mithnlj}im uist`llib, Jbb `f }ai hlf`soj}h`l ~jt uycbhtaim }` vjsh`yt JM MT d`l}jhlist

d`l}s`bbim cx JDBt, ]aiti d`l}jhlist jsi ujs} `f }ai JM MT D`lfhnysj}h`l d`l}jhlis"iljcbhln }ai D`lfhnysj}h`l d`l}jhlis }` ci siubhdj}im }` jbb m`ojhl d`l}s`bbist ~h}ahl }ai

f`sit}, Ohds`t`f} H] }ayt ojhl}jhlt dil}sjb d`l}s`b `vis ils`bboil} `f }aiti dis}hfhdj}it"

oh}hnj}hln }ai u`tthchbh}x `f yljy}a`sh{im dis}hfhdj}i httyjldi jlm ytjni,

]a`yna jy}a`sh{im mj}j/dil}is uist`llib ajvi uaxthdjb jdditt }` }ai DJ tisvist" b`n`l ht

l`} jbb`~im !jdditt ht bhoh}im }` ajsm~jsi ojhl}iljldi jlm tyuu`s} `lbx(, ]` jttht} ~h}a

`uisj}hln txt}io jlm tisvhdi o`lh}`shln" Ohds`t`f} H] sijdaim jl jnsiioil} ~h}a }ai

Page 13: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 13/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :4

Ohds`t`f} Nb`cjb @uisj}h`lt }ijo }aj} jd}t jt }ai fhst} u`hl} `f d`l}jd} f`s tyuu`s} `f }ai

il}hsi hlfsjt}syd}ysi j} Ohds`t`f} !hldbymhln m`ojhl d`l}s`bbist jlm `}ais ahna/tidysh}x

tisvist( jlm jbb`~im j tycti} `f Nb`cjb @uisj}h`lt tilh`s t}jff oiocist }` b`n `l }` }ai

DJt f`s }ai uysu`ti `f }s`ycbita``}hln jlm sinybjs ojhl}iljldi, Oiocist `f }aht tyuu`s}

}ijo oyt} yti }~`/fjd}`s jy}ail}hdj}h`l }` b`n `l,

Cif`si jdditt ht us`vhth`lim" ijda tyuu`s} }idalhdhjl oyt} }jgi DJ }sjhlhln !hl }ai f`so `f jvhmi` d`ysti usiujsim cx }ai Ohds`t`f} H] DJ }ijo( jlm ajvi aht `s ais ojljnis dis}hfx }aj}

}sjhlhln ~jt tyddittfybbx d`oubi}im, Yu`l d`oubi}h`l `f }ai }sjhlhln" ijda tyuu`s}

}idalhdhjl oyt} n` }as`yna jl `ffhdhjb jdditt/us`vhth`lhln sizyit} us`ditt" ~ahda ajt ciil

sidil}bx }him hl}` }ai `visjbb ibivj}im jdd`yl}/us`vhth`lhln us`ditt f`s jbb ahna/tidysh}x

jdditt j} Ohds`t`f}, Jf}is DJ jdditt ht juus`vim" }ai sid`smt jsi b`nnim hl}` j tidysi/

jdditt mj}jcjti jlm sivhi~im `l j zyjs}isbx cjtht,

O`t} DJ tisvist sizyhsi jbb d`llid}h`lt }` }ai DJ }` ci `vis HUtid" ~h}a }ai iqdiu}h`l `f }ai

DJt }aj} httyi HUtid dis}hfhdj}it, Jmmh}h`ljbbx" ijda DJ ytit }ai t`f}~jsi fhsi~jbb hldbymim hl

^hlm`~t Tisvis }` fys}ais bhoh} jbb`~im }sjffhd,

Page 14: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 14/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :=

HLT]JBBJ]H@L JLM HOUBIOIL]J]H@L D@LTHMISJ]H@LT 

DSB" JHJ" jlm Dis}hfhdj}i ]ioubj}i D`lthmisj}h`lt

Myshln }ai hlt}jbbj}h`l jlm d`lfhnysj}h`l `f JM DT" Ohds`t`f} H] d`lfhnysim ijda `f }ai

f`bb`~hln;

  Uycbhdj}h`l `f `ffbhli DJ dis}hfhdj}it }` JM MT, Ohds`t`f} H] uycbhtaim }ai `ffbhli s``}jlm tyc`smhlj}i DJ dis}hfhdj}it }` JM MT }as`yna yti `f }ai d`oojlm/bhli }``b

dis}y}hb,iqi, Ohds`t`f} H] uycbhtaim }ai s``} dis}hfhdj}i mhsid}bx }` }ai Dis}hfhdj}h`l

Jy}a`sh}hit jlm Jy}a`sh}x Hlf`soj}h`l Jdditt !JHJ( d`l}jhlist `f JM MT, Ohds`t`f} H]

ytit }ai Dis}hfhdj}h`l Jy}a`sh}hit d`l}jhlis }` mifhli }syt}im s``} DJt ~h}ahl }ai

il}isushti" jlm jbb il}isushti dbhil}t sid`nlh{i h}, Ohds`t`f} H] d`ybm ajvi `u}im }`

mht}shcy}i }ai s``} dis}hfhdj}i cx ythln Ns`yu U`bhdx, A`~ivis" }aht mht}shcy}h`l ~`ybm

ajvi sizyhsim tiujsj}i u`bhdx d`lfhnysj}h`lt f`s ijda m`ojhl hl }ai il}isushti t}syd}ysi,

Cx uycbhtahln }ai s``} dis}hfhdj}i mhsid}bx }` JM MT hl ijda sizyhsim f`sit}" Ohds`t`f} H]

uytaim h} }` jbb il}isushti dbhil}t”hl oyb}hubi m`ojhlt }as`yna`y} }ai f`sit}”hl `li

us`ditt,

Ohds`t`f} H] jbt` uycbhtaim }ai `ffbhli hl}isoimhj}i DJ dis}hfhdj}it hl }ai JHJ d`l}jhlis,

]aht jd}h`l us`vhmim j b`dj}h`l fs`o ~ahda ytist d`ybm `c}jhl }ai dis}hfhdj}it f`s }ai DJt,

]aht d`l}jhlis ~jt jl iffid}hvi siu`th}`sx f`s DJ dis}hfhdj}it cidjyti h}" jb`ln ~h}a }ai

`}ais UGH/sibj}im d`l}jhlist" ht ujs} `f }ai D`lfhnysj}h`l d`l}jhlis" ~ahda ht siubhdj}im }`

ivisx m`ojhl d`l}s`bbis ~h}ahl }ai f`sit},

  Dis}hfhdj}it }` ci httyim, Ohds`t`f} sit}shd}im }ai httyhln DJt }` httyhln `lbx tuidhfhd

dis}hfhdj}i }xuit, Cx mifjyb}" jl il}isushti DJ ht usid`lfhnysim ~h}a j vjshi}x `f dis}hfhdj}i

}ioubj}it, Ohds`t`f} H] mibi}im yl~jl}im dis}hfhdj}i }ioubj}it fs`o }ai DJt jlm jmmim

`lbx }ai }ioubj}it }aj} h} ~jl}im, Hl ^hlm`~t Tisvis 3551 jlm ^hlm`~t Tisvis 3551

S3" mifjyb} }ioubj}it djl ci tyuusittim }as`yna j DJU`bhdx,hlf fhbi,

  DSB mht}shcy}h`l u`hl} !DMU(, ]ai DMU ht jl iq}ilth`l hl j dis}hfhdj}i }aj} mifhlit

~aisi j DJ uycbhtait h}t DSB, ]ai DSB mht}shcy}h`l u`hl} ht ~aisi jlx dbhil} `s

juubhdj}h`l }aj} ht uisf`sohln dis}hfhdj}i vjbhmj}h`l" hldbymhln siv`dj}h`l daidghln" djlsi}shivi }ai dyssil} DSB fs`o }ai httyhln DJ, ]aht b`dj}h`l ht ~sh}}il hl}` }ai dis}hfhdj}it

}aj} }ai DJ httyit, Cif`si Ohds`t`f} H] hlt}jbbim Dis}hfhdj}i Tisvhdit" h} mifhlim }ai DSB

mht}shcy}h`l u`hl} YSBt }aj} ~`ybm ci ytim cx j DJ cx dsij}hln j Dju`bhdx,hlf fhbi jlm

mifhlhln uj}at, D`lfhnysj}h`l `f }aht iq}ilth`l hl Dis}hfhdj}i Tisvhdit jf}is hlt}jbbj}h`l

}ail mifhlim ~ahda YSBt ~`ybm ci hldbymim hl }ai dis}hfhdj}it }aj} }ai s``} DJ httyim, J

tibf/thnlim s``} DJ ta`ybm l`} bht} jlx DMUt,

  Jy}a`sh}x Hlf`soj}h`l Jdditt, Thohbjs }` }ai DSB mht}shcy}h`l u`hl} iq}ilth`l" }ai JHJ

iq}ilth`l mifhlit ~aisi }ai DJ.t dis}hfhdj}i ht uycbhtaim, ]aht hlf`soj}h`l ht jbt` ~sh}}il

hl}` dis}hfhdj}it }aj} }ai DJ httyit, Ush`s }` }ai hlt}jbbj}h`l `f }ai DJ" Ohds`t`f} H] mifhlim

!hl j Dju`bhdx,hlf fhbi( }ai hlf`soj}h`l }aj} }ai DJ ~`ybm yti, D`lfhnysj}h`l `f }aht

iq}ilth`l hl Dis}hfhdj}i Tisvhdit jf}is hlt}jbbj}h`l }ail mifhlim ~ahda YSBt ~`ybm ci

hldbymim hl }ai dis}hfhdj}it }aj} }ai s``} DJ httyim, J tibf/thnlim s``} DJ ta`ybm l`} bht}

jlx JHJ b`dj}h`lt,

DSB Uycbhdj}h`l

^ail jlx juubhdj}h`l" ytis" `s us`ditt vjbhmj}it j dis}hfhdj}i" h} ojgit tysi }aj} }ai

dis}hfhdj}i dajhlt }` j s``} }aj} ht }syt}im `l }aj} txt}io" ht }hoi/vjbhm" jlm d`l}jhlt }ai

Page 15: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 15/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :9

tuidhfhd fyld}h`ljb djujchbh}hit f`s ~ahda h} ht cihln usitil}im, Hf jbb `f }aiti daidgt ujtt" }ai

dis}hfhdj}i ht d`lthmisim vjbhm,

]ai DSB ht daidgim }` ojgi tysi }aj} dis}hfhdj}it }aj} `}ais~hti ~`ybm ci d`lthmisim vjbhm

ajvi l`} ciil siv`gim, ]ai DSB h}tibf ht j fhbi" thnlim cx }ai DJ" }aj} d`l}jhlt j bht} `f

siv`gim dis}hfhdj}it, ]ai bht} mifhlit }ai siv`gim dis}hfhdj}it cx tishjb lyocis" jlm h} hldbymit

}ai siv`dj}h`l mj}i hl jmmh}h`l }` }ai sijt`l f`s siv`dj}h`l, ]ai juubhdj}h`l }aj} ht uisf`sohln}ai dis}hfhdj}i vjbhmj}h`l mi}isohlit ~ai}ais `s l`} h} daidgt f`s siv`gim dis}hfhdj}it jt ujs} `f

}ai vjbhmj}h`l us`ditt, ^ail jl juubhdj}h`l daidgt f`s siv`gim dis}hfhdj}it" h} si}shivit }ai

dyssil} DSB fs`o `li `f }ai YSBt tuidhfhim hl }ai DSB mht}shcy}h`l u`hl} iq}ilth`l `f }ai

dis}hfhdj}i cihln vjbhmj}im, Jf}is }ai DSB ht si}shivim" h} ht }xuhdjbbx djdaim yl}hb h}t iquhsj}h`l,

Jf}is j DSB ht djdaim" }ai juubhdj}h`l uisf`sot fys}ais siv`dj}h`l daidgt jnjhlt} }aht djdaim

d`ux" ibhohlj}hln }ai liim }` si}shivi }ai DSB f`s ijda siv`dj}h`l daidg, ^ail iquhsim" }ai

DSB h}tibf cid`oit hlvjbhm" f`sdhln }ai m`~lb`jm `f j li~ DSB,

Ohds`t`f} H] djsifybbx d`lthmisim ~ahda b`dj}h`lt jlm us`}`d`bt }` uycbhta hl dis}hfhdj}i DMUt,

O`t} dis}hfhdj}it yti j d`ochlj}h`l `f A]]U jlm JM MT !BMJU( DMUt }aj} jsi ahnabx

jvjhbjcbi, Ohds`t`f} H] jbt` jljbx{im ~a` }ai dyssil} jlm fy}ysi sibxhln ujs}hit `f }ai

dis}hfhdj}it ~`ybm ci, DSB mht}shcy}h`l u`hl}t oyt} ci jvjhbjcbi }` jlx`li ~a` oyt} vjbhmj}i

}ai dis}hfhdj}i, Ohds`t`f} H] d`lthmisim ~ai}ais dis}hfhdj}it ~`ybm liim }` ci vjbhmj}im fs`o

`y}thmi }ai d`su`sj}i li}~`sg jlm ojmi DMUt jvjhbjcbi fs`o `y}thmi jt liimim, Ojlx

DSBt jsi a`t}im `l j ahnabx jvjhbjcbi ^hlm`~t J{ysi —cjtim t`by}h`l,

DSB Bhfi}hoi

Ohds`t`f} H] d`lfhnysim mhffisil} DJt }` ajvi mhffisil} DSB uycbhdj}h`l hl}isvjbt" miuilmhln

`l a`~ }ai dis}hfhdj}it }aj} }ai DJt httyim ~isi ytim, F`s iqjoubi" Ohds`t`f} H] hlh}hjbbx

d`lfhnysim }ai DSB bhfi}hoi }` ci 3= a`yst f`s }ai tojs} djsm DJt" jlm f`ys mjxt f`s }ai y}hbh}x

DJt, !Y}hbh}x DJt jsi }a`ti DJt }aj} httyi j vjshi}x `f dis}hfhdj}it }` Ohds`t`f} ytist jlm

d`ouy}ist" hldbymhln HUtid" ~hsibitt" m`ojhl d`l}s`bbis jy}ail}hdj}h`l" sio`}i jdditt jlm

Hl}isli} Jy}ail}hdj}h`l Tisvhdi WHJT_" jlm IFT(,

]ai uysu`ti `f }ai mhffisil}hjb ~jt }` cjbjldi }ai liim f`s }hoibx DSB yumj}it hf j dis}hfhdj}i

liimim }` ci siv`gim" ~ahbi ohlhoh{hln }ai uisf`sojldi houjd}t `f fsizyil} DSB si}shivjb

jlm mhsid}`sx siubhdj}h`l, ^h}a }ai siv`dj}h`l `f j tojs} djsm jy}ail}hdj}h`l dis}hfhdj}i"

Ohds`t`f} H] ~jl}im }ai siv`dj}h`l t}j}yt }` }jgi iffid} jt zyhdgbx jt u`tthcbi, Cidjyti j

DSB ht }xuhdjbbx djdaim yl}hb h} iquhsit" ta`s} iquhsj}h`lt ~`ybm iltysi }hoibx DSB yumj}it

}aj} ~`ybm sifbid} dyssil} siv`dj}h`l t}j}yt o`si zyhdgbx,

DSB uycbhtahln f`s }ai `ffbhli DJt ht j ojlyjb us`ditt, ]ai DSB bhfi}hoi f`s }ai `ffbhli DJt

j} Ohds`t`f} ht 85 mjxt, Oiocist `f }ai D`su`sj}i Tidysh}x }ijo oyt} il}is }ai DJ djni }`

ojlyjbbx uycbhta }ai DSB fs`o }aiti `ffbhli DJt cidjyti }aix jsi l`sojbbx }yslim `ff jlm

jb~jxt bjdg li}~`sg d`llid}hvh}x, Dis}hfhdj}i TisvhditJM DT ajlmbit DSB uycbhtahln f`s }ai

`lbhli DJt jy}`oj}hdjbbx j} }ai usimi}isohlim hl}isvjbt,

J DSB ajt jl it}jcbhtaim bhfi}hoi" jlm j li~ DSB oyt} ci uycbhtaim cif`si }ai `bm DSB

iquhsit, ]ai DSB uycbhdj}h`l hl}isvjb hldbymit j cyffis }` mifhli j tuidhfhd jo`yl} `f }hoi f`s

~ahda iqht}hln DSBt ~hbb siojhl vjbhm jf}is }ai liq} tdaimybim DSB uycbhdj}h`l, ]ai uysu`ti

`f }aht `visbju uish`m ht }` us`vhmi }hoi f`s ojlyjb uycbhdj}h`l jlm siubhdj}h`l `f }ai li~bx

dsij}im DSB ush`s }` }ai iquhsj}h`l `f }ai `shnhljb DSB" jlm }` jv`hm bijvhln j nju hl }ai

jvjhbjchbh}x `f j vjbhm DSB, ]ai mifjyb} `visbju uish`m ht :5 uisdil} `f }ai DSB bhfi}hoi uish`m"

~h}a j ojqhoyo `f :3 a`yst,

Page 16: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 16/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :6

^ail Ohds`t`f} H] midhmim }` uycbhta j li~ DSB ivisx 3= a`yst f`s tojs} djsm DJt" }ai

mifjyb} `visbju uish`m ~jt simydim }` kyt} 3,= a`yst, Cidjyti }aht uish`m mhm l`} us`vhmi

tyffhdhil} }hoi f`s siubhdj}h`l `f }ai li~ DSB }as`yna`y} Ohds`t`f} H].t ~`sbm~hmi il}isushti

cif`si }ai usivh`yt DSB iquhsim" Ohds`t`f} H] liimim }` ojlyjbbx d`lfhnysi }ai DSB `visbju

}` iq}ilm }ai vjbhmh}x uish`m, ]ai iq}ilmim uish`m iltysim }aj} }ai `bm DSB ~`ybm siojhl

vjbhm ~ahbi }ai li~ DSB ~jt cihln siubhdj}im }as`yna`y} }ai li}~`sg, Jt tyda" tojs} djsm

DJ DSBt jsi uycbhtaim 3= a`yst ~h}a j 3=/a`ys `visbju uish`m" ojghln }ai DSB vjbhm f`s =1

a`yst, ]ai sit} `f }ai DJ DSBt jsi uycbhtaim ivisx f`ys mjxt ~h}a j f`ys/mjx `visbju uish`m"

ojghln }a`ti DSBt vjbhm f`s ihna} mjxt,

Page 17: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 17/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :>

UGH/ILJCBIM TISVHDIT 

Ohds`t`f} H] ajm tivisjb ytis sizyhsioil}t }aj} liimim }ai miub`xoil} `f dsxu}`nsjuahd

}idal`b`nhit, ]aiti sizyhsioil}t hldbymim;

  Iljcbhln t}s`ln li}~`sg ytis jy}ail}hdj}h`l cx ythln tojs} djsmt,

  Aibuhln }` iltysi }ai d`lfhmil}hjbh}x jlm hl}insh}x `f }sjltoh}}im mj}j cx ythln HUtid,

  Aibuhln }` iltysi }ai d`lfhmil}hjbh}x `f t}`sim mj}j cx ythln IFT,

  Aibuhln }` tidysi iojhb cx ythln TOHOI ildsxu}h`l jlm mhnh}jb thnlj}ysit,

  Aibuhln }` tidysi ~ic d`llid}h`lt cx ythln TTB `s ]sjltu`s} Bjxis Tidysh}x !]BT(,

  Ilf`sdhln aijb}a `f m`ojhl/oiocis d`ouy}ist cx houbioil}hln LJU,

]ai f`bb`~hln tid}h`lt mitdshci a`~ Ohds`t`f} H] ~jt jcbi }` oii} ijda `f }a`ti

sizyhsioil}t ~h}a }ai aibu `f Dis}hfhdj}i TisvhditJM DT,

Tojs} Djsmt f`s Li}~`sg Jdditt

J tojs} djsm ht j dsimh} djsm —th{i" u`s}jcbi }`gil }aj} a`bmt oio`sx" j fhbi jlm `uisj}hln

txt}io" jlm j ohds`us`ditt`s, H} ohna} jbt` d`l}jhl sjmh` fsizyildx hmil}hfhdj}h`l !SFHM( jlm

j uist`ljb hmil}hfhdj}h`l ua`}` ushl}im `l h}”

c`}a hou`s}jl} hl d`lthmishln uaxthdjbjy}a`sh{j}h`l }` d`oujlx cyhbmhlnt `s `}ais d`l}s`bbim/jdditt fjdhbh}hit,

Ohds`t`f} H] d`lthmisim tivisjb jb}islj}hvi }idal`b`nx t`by}h`lt cif`si tibid}hln tojs} djsmt

jt }ai usifissim t`by}h`l, Tojs} djsmt us`vhmim }ai cit} `visjbb vjbyi cjtim `l sibhjchbh}x"

uisf`sojldi" d`t}" fij}ysit" o`chbh}x cilifh}t" ijti `f tyuu`s}" jlm hl}insj}h`l ~h}a }ai

Ohds`t`f} H] ^hlm`~t li}~`sg ilvhs`loil},

L`}i; F`s o`si hlf`soj}h`l jc`y} }ai Ohds`t`f} H] midhth`l }` miub`x tojs} djsmt jlm jc`y} 

}ai miub`xoil}" tii #Tojs} Djsm Miub`xoil} j} Ohds`t`f}# j} 

a}}u;}idali},ohds`t`f},d`oil/ytbhcsjsxdd86=456,jtuq , 

J gix fij}ysi `f tojs} djsmt ht }aj} }aix us`vhmi tidysh}x/ilajldim t}`sjni `f mj}j" hldbymhln

dsxu}`nsjuahd mj}j, Tojs} djsmt houbioil} jy}ail}hdj}h`l }as`yna j ytis UHL" ~ahda }ail

jy}a`sh{it }ai ytis }` jdditt mj}j `l }ai tojs} djsm, J tojs} djsm houbioil}t oyb}hubi

dsxu}`nsjuahd jbn`sh}aot }aj} jbb`~ gixt }` ci nilisj}im `l }ai djsm jlm l`} ci iqu`s}jcbi

fs`o }ai djsm, Jl jy}ail}hdj}h`l dis}hfhdj}i ~h}a }ai ushvj}i gix us`}id}im cx j tojs} djsm

jbb`~t f`s t}s`ln }~`/fjd}`s jy}ail}hdj}h`l; t`oi}ahln }ai ytis ajt !tojs} djsm( jlm

t`oi}ahln }ai ytis gl`~t !UHL(, ]ai d`ochlim yti `f }ai tojs} djsmt jlm j UGH/djujcbi

jy}ail}hdj}h`l us`}`d`b tyda jt Iq}ilthcbi Jy}ail}hdj}h`l Us`}`d`b !IJU(]BT iljcbit j

oyda t}s`lnis jy}ail}hdj}h`l oidajlhto `vis }ai t}jlmjsm juus`jda `f il}ishln j ytis

ljoi jlm ujtt~`sm,

]ai hlh}hjb tojs} djsm miub`xoil} j} Ohds`t`f} ~jt cyhb} yu`l tivisjb }idal`b`nhit f`ylm hl

}ai ^hlm`~t 3555 Tisvis hlfsjt}syd}ysi" hldbymhln Dis}hfhdj}i Tisvhdit" S`y}hln jlm Sio`}i

Jdditt" jlm HJT, ]ai tojs} djsm t`by}h`l ~jt ilajldim ~ail Ohds`t`f} H] yunsjmim }`^hlm`~t Tisvis 3554, ]ai UGH ilajldioil}t }` ^hlm`~t Tisvis 3554" ^hlm`~t

Tisvis 3551" jlm ^hlm`~t Tisvis 3551 S3 iljcbim Ohds`t`f} H] }` ci}}is ojljni dis}hfhdj}i

ils`bboil} jlm sili~jbt" jt ~ibb jt mibinj}i }ai us`ditt `f dsij}hln jlm mht}shcy}hln tojs}

djsmt,

Page 18: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 18/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :1

Tojs} Djsm Hlfsjt}syd}ysi

]` iljcbi httyjldi `f tojs} djsm b`n`l dis}hfhdj}it" Ohds`t`f} H] miub`xim }~` DJ tisvist f`s

ijda us`myd}h`l f`sit}" jlm d`lfhnysim }a`ti }` dajhl ylmis }ai Ohds`t`f} D`su`sj}i S``}

DJ, ]ai }~` tojs} djsm DJt jd} jt tojs} djsm httyhln jy}a`sh}hit `lbx”l` `}ais dis}hfhdj}i

}ioubj}it ~isi miub`xim `l }aiti tisvist,

]~` `}ais dis}hfhdj}i }xuit jsi sizyhsim f`s iljcbhln tojs} djsm/cjtim b`n`l;

  M`ojhl d`l}s`bbis jy}ail}hdj}h`l dis}hfhdj}it !f`s jbb m`ojhl d`l}s`bbist hl }ai f`sit}(

  Sio`}i jdditt jlm HJT tisvis dis}hfhdj}it !f`s jbb Sio`}i Jy}ail}hdj}h`l Mhjb/Hl Ytis

Tisvhdi WSJMHYT_ tisvist ujs}hdhuj}hln hf tojs} djsmt jsi ytim f`s vhs}yjb ushvj}i li}~`sg

WVUL_ jdditt(

Ohds`t`f} H] httyit c`}a `f }a`ti dis}hfhdj}it fs`o jl`}ais ti} `f DJt !y}hbh}x DJt( }aj} jbt`

dajhl }` }ai Ohds`t`f} D`su`sj}i S``} DJ,

]ai Ohds`t`f} d`su`sj}i ilvhs`loil} ild`oujttit lhli f`sit}t" ~ahda hldbymi us`myd}h`l"

usius`myd}h`l" jlm `}ais cythlitt jlm }it} ilvhs`loil}t, ]`mjx" `li jmohlht}sj}`s oyt}

t`oi}hoit ojljni sit`ysdit jds`tt oyb}hubi f`sit}t, Aildi" hf jl jmohlht}sj}`s oyt} yti

aht `s ais djsm }` jy}ail}hdj}i }` j sit`ysdi hl jl`}ais f`sit}" }ai tojs} djsm DJ }aj} httyim}ai jmohlht}sj}`s.t b`n`l dis}hfhdj}i oyt} ci }syt}im f`s jy}ail}hdj}h`l hl }ai f`sit} ~aisi }ai

sit`ysdi ht cihln jddittim, ]` jdd`oubhta }aj}" Ohds`t`f} H] ojlyjbbx uycbhtait }ai

dis}hfhdj}i `f }ai httyhln tojs} djsm DJ }` }ai L]Jy}a d`l}jhlis `f ivisx f`sit} ~aisi }ai

jmohlht}sj}`s ohna} j}}iou} }` jdditt }ai sit`ysdi,

Mibinj}im Httyjldi

Ohds`t`f} H] mhm l`} ~jl} }` jbb`~ ytist }` ils`bb }aiotibvit f`s tojs} djsmt }as`yna tibf/

tisvhdi, Ohds`t`f} H] ~jl}im }` ojhl}jhl d`l}s`b `f }ai httyjldi jlm mht}shcy}h`l t` }aj} j

fjdi/}`/fjdi jy}ail}hdj}h`l d`ybm ci uisf`soim jlm t` }aj} `lbx jy}a`sh{im ytist sidihvim

tojs} djsmt,

F`s }ai hlh}hjb uhb`} miub`xoil}" Ohds`t`f} H] t}jff !b`dj}im hl Simo`lm" ^jtahln}`l( hl}ilmim

}` dsij}i jlm httyi tojs} djsmt }` jbb Uyni} T`ylm ytist" jlm }ail tyctizyil}bx httyi tojs}

djsmt }` jbb `}ais ytist ~`sbm~hmi, A`~ivis" Ohds`t`f} H] zyhdgbx mhtd`visim }aj} f`s `ln`hln

tyuu`s}" h} liimim j o`si mht}shcy}im ubjl }` tidysibx jlm zyhdgbx httyi tojs} djsmt }` ytist

sinh`ljbbx, Ohds`t`f} H] midhmim }` yti j mibinj}im httyjldi o`mib }` tyuu`s} tojs} djsmt

jf}is }ai hlh}hjb miub`xoil},

]ai houbioil}j}h`l `f j mibinj}im httyjldi o`mib ~jt u`tthcbi `lbx jf}is Ohds`t`f} H]

yunsjmim }ai d`su`sj}i UGH }` ^hlm`~t Tisvis 3554, ]ai ilajldim fbiqhchbh}x `f }ai

^hlm`~t Tisvis 3554 jlm ^hlm`~t Tisvis 3551 UGHt”ujs}hdybjsbx }ai jchbh}x }` tuidhfx

mi}jhbim httyjldi sizyhsioil}t `l }ai dis}hfhdj}i }ioubj}it”iljcbim }ai mibinj}im httyjldi

o`mib }` tyuu`s} }ai sizyhsim bhoh}im fyld}h`ljbh}x s`bi `f Mibinj}im Httyjldi @ffhdist !MH@t(,

Ohds`t`f} H] ~jl}im }` mht}shcy}i }ai httyjldi `f tojs} djsmt jlm ojhl}jhl d`l}s`b `vis }ai

httyjldi `f }ai dis}hfhdj}it `l }aio, ]ai mibinj}im httyjldi o`mib jbb`~im }ai MH@t }`tycoh} dis}hfhdj}i sizyit}t `l ciajbf `f `}ais ytist" cy} }ai httyjldi `f }a`ti dis}hfhdj}it

sizyhsim }ai iqubhdh} juus`vjb `f Ohds`t`f} H], ]ai li~ httyjldi sizyhsioil} ti}}hlnt `l

^hlm`~t Tisvis 3554 dis}hfhdj}i }ioubj}it iljcbim Ohds`t`f} H] }` tuidhfx jbb li~ dis}hfhdj}i

sizyit}t }` ci ti} }` j uilmhln t}j}yt jlm sizyhsi juus`vjb fs`o j dis}hfhdj}i ojljnis, Jf}is

}ai sizyit} ~jt juus`vim jlm }ai dis}hfhdj}i ~jt httyim" }ai MH@ ~`ybm ci jcbi }` si}shivi

}ai dis}hfhdj}i jlm ~sh}i h} }` }ai ytis.t tojs} djsm,

Page 19: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 19/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni :8

Oiocist `f Ohds`t`f} H] ~il} `l j ~`sbm~hmi }`ys }` vhth} jlm }sjhl }ai vjsh`yt MH@t `l }aihs

my}hit" sizyhsim us`dimysit" tidysh}x d`lthmisj}h`lt f`s tojs} djsm mht}shcy}h`l" jlm a`~ }`

yti }ai hl}isljbbx mivib`uim tojs} djsm }``bt, Jf}is~jsm" MH@t ujs}hdhuj}im hl ~iigbx

}ibid`lfisildit ~h}a Ohds`t`f} H] }` giiu yu }` mj}i `l ioisnhln jlm d`l}hlyhln httyit,

Tojs} Djsm Sili~jb

]ai Ohds`t`f} H] }ijo jbt` }``g jmvjl}jni `f }ai fbiqhchbh}x `f UGH fij}ysit t}js}hln hl

^hlm`~t Tisvis 3554 }` iljcbi ytist }` sili~ }aihs tojs} djsm dis}hfhdj}it }aiotibvit, Cx

ythln }ai li~ httyjldi sizyhsioil} fij}ysit" Ohds`t`f} H] ~jt jcbi }` d`lfhnysi }ai

dis}hfhdj}i }ioubj}i tyda }aj} jy}a`sh{im ils`bboil} jnil}t oyt} uisf`so hlh}hjb ils`bboil}t

f`s jbb li~ tojs} djsm dis}hfhdj}it, A`~ivis" ijda ytis djl sili~ aht `s ais `~l tojs} djsm

dis}hfhdj}i cx ioub`xhln }ai iqht}hln vjbhm dis}hfhdj}i }` thnl }ai sili~jb sizyit} f`s h}t

siubjdioil}, ]aht jchbh}x nsij}bx simydit }ai `ln`hln d`t}t jtt`dhj}im ~h}a j tojs} djsm

miub`xoil} cidjyti Ohds`t`f} H] l` b`lnis liimt }` ojlyjbbx sili~ ijda tojs} djsm ~ail

}ai dis}hfhdj}i iquhsit,

Hl jmmh}h`l }` iljcbhln ytist }` sili~ }aihs `~l tojs} djsm dis}hfhdj}it" jy}` sili~jb

fyld}h`ljbh}x aibut }` iltysi }aj} ytist sili~ }aihs dis}hfhdj}it ush`s }` iquhsj}h`l, ]ai

dis}hfhdj}i }ioubj}i d`lfhnysj}h`l jbb`~t f`s tuidhfhdj}h`l `f }ai sili~jb uish`m, ^ail jdis}hfhdj}i sijdait }aht uish`m" jy}` sili~jb d`mi us`ou}t }ai ytis }` sili~ }ai dis}hfhdj}i

jlm us`vhmit jl jy}`oj}im oi}a`m }` m` t`,

HUtid

HUtid ht j fsjoi~`sg `f `uil t}jlmjsmt f`s aibuhln }` us`}id} d`ooylhdj}h`lt `vis HU

li}~`sgt }as`yna }ai yti `f dsxu}`nsjuahd tidysh}x tisvhdit,

Hl 355=" Ohds`t`f} H] hl}s`mydim }ai d`ldiu} `f m`ojhl ht`bj}h`l }` h}t d`su`sj}i li}~`sg, ]ai

uysu`ti `f tyda jl hlh}hj}hvi ~jt }` aibu us`}id} m`ojhl/oiocis" H]/ojljnim sit`ysdit

fs`o dbhil}t }aj} jsi l`} oiocist `f jl ht`bj}im m`ojhl, Ohds`t`f} H] da`ti HUtid jt }ai

ilf`sdioil} oi}a`m" jlm }as`yna j d`ochlj}h`l `f Ns`yu U`bhdx" HUtid u`bhdhit jlm fhb}ist"

Giscis`t" jlm `}ais gix }idal`b`nhit" houbioil}im h} jds`tt }ai d`oujlx,

D`llid}h`l Ojljnis" miub`xim }` jbb`~ tidysi sio`}i jdditt }` }ai d`su`sj}i li}~`sg" ~jt

jbt` mithnlim }` sizyhsi }ai yti `f HUtid hl `smis }` it}jcbhta j tidysi d`llid}h`l }` j

m`ojhl/oiocis sit`ysdi, Jmmh}h`ljbbx" Ohds`t`f} H] hl}insj}im Tidysi Sio`}i Ytis tdshu}t

}aj} sjl j ti} `f daidgt `l j dbhil} j}}iou}hln }` d`llid} }` }ai d`su`sj}i li}~`sg" jlm }ail

uisf`soim tivisjb jd}h`lt `l }aj} dbhil} }` iltysi }aj} h} oi} jbb }ai juus`ushj}i tidysh}x

u`bhdhit, @li `f }a`ti jd}h`lt ~jt jdzyhshln j d`ouy}is dis}hfhdj}i fs`o `li `f }ai d`su`sj}i

y}hbh}x DJt,

]ai hlh}hjb DJ houbioil}j}h`l }` tyuu`s} HUtid ajm }~` y}hbh}x DJt uis f`sit} }aj} ~isi httyhln

HUtid dis}hfhdj}it }` dbhil} d`ouy}ist, ^ail Ohds`t`f} H] yunsjmim }ai DJ hlfsjt}syd}ysi }`

^hlm`~t Tisvis 3551 S3" h} }``g jmvjl}jni `f ds`tt/f`sit} ils`bboil} jlm cinjl httyhln jbb

HUtid dis}hfhdj}it fs`o f`ys y}hbh}x DJt hl }ai ushojsx d`su`sj}i f`sit}, Jbb DJt }aj} httyiHUtid dis}hfhdj}it jsi thnlim ylmis }ai Ohds`t`f} D`su`sj}i S``} DJ,

Ohds`t`f} H] ti} }ai }ioubj}it ytim f`s d`lfhnyshln }ai httyjldi `f HUtid dis}hfhdj}it }`

jy}`oj}hdjbbx ils`bb" ~ahda aibuim t}sijobhli }ai httyjldi us`ditt, Hf" f`s jlx sijt`l" }ai

dbhil} fjhbim }` jy}`oj}hdjbbx `c}jhl jl HUtid dis}hfhdj}i ~ail }sxhln }` d`llid} vhj sio`}i

jdditt !D`llid}h`l Ojljnis(" }ai dbhil} ajm jl `u}h`l }` ojlyjbbx jdzyhsi tyda j dis}hfhdj}i

cx ythln }ai DJt. ~ic ils`bboil} ujnit, ]` jbb`~ }aj}" a`~ivis" Ohds`t`f} H] ajm }` iltysi

Page 20: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 20/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 35

}aj} }ai httyhln DJ tisvist }aiotibvit ~`ybm jbb`~ l`l/HUtid }sjffhd7 jt j sityb}" }ai tisvist

~isi d`lfhnysim jt HUtid c`ylmjsx d`ouy}ist, Ohds`t`f} H] }ail uycbhtaim jl HUtid @ffbhli

}ioubj}i `l ijda `f }ai y}hbh}x DJt t` }aj} l`l/HUtid d`lfhnysim a`t}t d`ybm ils`bb f`s jl

HUtid dis}hfhdj}i vhj }ai ~icujnit,

IFT

IFT ht j d`ou`lil} `f }ai L]FT fhbi txt}io, H} iljcbit }sjltujsil} ildsxu}h`l jlm

midsxu}h`l `f fhbit cx ythln jmvjldim" t}jlmjsm dsxu}`nsjuahd jbn`sh}aot, Jlx hlmhvhmyjb `s

us`nsjo }aj} m`it l`} ajvi }ai juus`ushj}i dsxu}`nsjuahd gix djll`} sijm }ai ildsxu}im

mj}j, Ildsxu}im fhbit djl ci us`}id}im ivil fs`o }a`ti ~a` njhl uaxthdjb u`ttitth`l `f }ai

d`ouy}is }aj} d`l}jhlt }ai fhbit, Ivil uist`lt ~a` jsi jy}a`sh{im }` jdditt }ai d`ouy}is

jlm h}t fhbi txt}io djll`} vhi~ }ai mj}j,

Ohds`t`f} H] iljcbim IFT vhj jy}`oj}hdjbbx ils`bbim dis}hfhdj}i }ioubj}it uycbhtaim `l j y}hbh}x

DJ }aj} ht thnlim cx }ai Ohds`t`f} D`su`sj}i S``} DJ, Ohds`t`f} H] d`lfhnysim }ai DJ ~h}a

gix jsdahvjb }` iljcbi ijtx sid`visx `f b`t} gixt, H} d`lfhnysim }ai IFT jy}`oj}hdjbbx

ils`bbim }ioubj}it ~h}a j `li/xijs vjbhmh}x uish`m,

TOHOITOHOI ht j }idal`b`nx }aj} aibut usivil} houist`lj}h`l jlm }jouishln ~h}a iojhb

oittjnit, TOHOI iljcbit ytist }` ildsxu} `y}n`hln oittjnit jlm j}}jdaoil}t t` }aj}

`lbx hl}ilmim sidhuhil}t ~a` ajvi }ai us`uis dis}hfhdj}it jlm gixt djl sijm }aio, ^h}a

TOHOI" ytist djl jbt` mhnh}jbbx thnl `y}n`hln oittjnit, ^ail j ytis mhnh}jbbx thnlt j

oittjni" ai `s tai nhvit }ai sidhuhil} j ~jx }` vishfx }ai hmil}h}x `f }ai tilmis jlm vishfx

}aj} }ai oittjni ajt l`} ciil }jouisim ~h}a,

Cif`si Ohds`t`f} H] cinjl httyhln TOHOI dis}hfhdj}it" h} d`lfhnysim mimhdj}im httyhln DJt"

iljcbim }aio f`s gix jsdahvjb" jlm dajhlim }aio }` j uycbhdbx }syt}im s``} !N]I Dxcis]syt}

Nb`cjb S``}(, D`lfhnyshln }ai DJt f`s gix jsdahvjb jbb`~im f`s fjt} gix sid`visx hl }ai djti `f

b`t} gixt, It}jcbhtahln j }syt} ~h}a j l`l/Ohds`t`f} il}h}x iljcbim Ohds`t`f} ytist }` ijthbx

iqdajlni tidysh}x/ilajldim iojhb ~h}a iq}isljb sidhuhil}t, A`~ivis" }ai mifjyb} l`l/Ohds`t`f} s``} DJ u`bhdx mhm l`} hldbymi jl juubhdj}h`l u`bhdx f`s gix jsdahvjb, ]` iljcbi h}"

Ohds`t`f} H] ds`tt/dis}hfhim h}t `~l hl}isoimhj}i DJ }aj} hldbymim tyda jl juubhdj}h`l u`bhdx

~h}a }ai N]I Dxcis]syt} Nb`cjb S``}" ~ahda hl }ysl jbb`~im }aj} fyld}h`l,

]ai dyssil} Ohds`t`f} houbioil}j}h`l `f TOHOI hldbymit t}`shln ildsxu}h`l jlm mhnh}jb

thnlj}ysi dis}hfhdj}it `l j tojs} djsm, Ioub`xiit djl yti jlx ~`sgt}j}h`l izyhuuim ~h}a j

tojs} djsm sijmis }` tilm jlm sidihvi TOHOI/iljcbim iojhb,

Cidjyti }ai ytjni sizyhsioil}t jlm ojljnioil} usjd}hdit f`s mhnh}jb thnlj}ysi ~isi n`hln

}` ci tbhna}bx mhffisil} fs`o }aj} `f ildsxu}h`l" Ohds`t`f} H] midhmim }` dsij}i }~` tiujsj}i

}ioubj}it, ]jcbi 3 ta`~t }ai mhffisildit }aj} bim }` }aj} midhth`l,

]jcbi 3, Mhffisildit Ci}~iil Mhnh}jb Thnlj}ysi jlm Ildsxu}h`l

D`lthmisj}h`l Mhnh}jb thnlj}ysi Ildsxu}h`l

Vjbhmh}x uish`m @li xijs ]~` xijst }` ohlhoh{i }ai

lyocis ̀ f ildsxu}h`l gixt }`

ojhl}jhl jlm sid`vis

Jsdahvjb L`} sizyhsim Sizyhsim f`s }ai uysu`tit ̀ f

gix sid`visx

Page 21: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 21/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 3:

Lyocis `f gixt Ylbhoh}im D`l}s`bbim f`s ijti ̀ f

sid`visx jlm mhsid}`sx

d`ltht}ildx

Ohds`t`f} H] da`ti }` jbb`~ jy}a`sh{im ytist }` jy}`oj}hdjbbx ils`bb f`s mhnh}jb thnlj}ysi

dis}hfhdj}it j} jlx }hoi cidjyti }aisi ~jt l` liim }` jsdahvi }aio" jlm yumj}it }` j mhnh}jb

thnlj}ysi dis}hfhdj}i jsi sibj}hvibx }sjltujsil} }` TOHOI tilmist jlm sidihvist,

A`~ivis" }` thoubhfx }ai sid`visx us`ditt" Ohds`t`f} H] midhmim }` ajvi j d`l}s`bbim

miub`xoil} `f ildsxu}h`l dis}hfhdj}it, Jt tyda" Ohds`t`f} H] sit}shd}im jy}`oj}hd ils`bboil} }`

tuidhfhd tidysh}x ns`yut, Tyda jl juus`jda jbt` us`vhmim }ai `uu`s}ylh}x f`s ytist }` #`u} hl#

}` }ai yti `f TOHOI ildsxu}h`l" hl jmmh}h`l }` simydhln jmmh}h`ljb tyuu`s} d`t}t }aj} ~`ybm

`}ais~hti ci jtt`dhj}im ~h}a j bjsni/tdjbi miub`xoil} `f TOHOI ildsxu}h`l, Ohds`t`f} H]

ytim Ohds`t`f} F`sifs`l} Hmil}h}x Ojljnis !FHO( }` ojljni }ai ns`yu }aj} jbb`~t d`l}s`bbim

ils`bboil} `f TOHOI ildsxu}h`l dis}hfhdj}it,

Gix Jsdahvjb jlm Sid`visx

Jt usivh`ytbx oil}h`lim" c`}a IFT jlm TOHOI djl yti gix jsdahvjb, Ushvj}i/gix sid`visx

m`it l`} sid`vis jlx mj}j `s oittjnit7 h} us`vhmit `lbx sid`visx `f b`t} `s mjojnim gixt,

@f}il" gixt oyt} ci sid`visim cif`si ildsxu}im mj}j djl ci sid`visim,

@li `f }ai jmvjl}jnit `f gix sid`visx `vis mj}j sid`visx ht }ai tjvhlnt sid`yuim hl tyuu`s}

d`t}t, F`s iqjoubi" ~h}a`y} gix jsdahvjb" hf jl IFT ytis ildsxu}t j f`bmis }aj} d`l}jhlt

9 nhnjcx}it !NC( `f mj}j `l aht `s ais b`djb ~`sgt}j}h`l jlm tyctizyil}bx b`tit }ai ushvj}i

gix" tyuu`s} }ijot oyt} n` }as`yna j bjc`sh`yt us`ditt `f mj}j sid`visx, ]aht us`ditt ojx

hldbymi;

:, Cjdghln yu }ai b`djbbx ildsxu}im mj}j,

3, ]sjltu`s}hln }ai cjdgyu }` j sid`visx ~`sgt}j}h`l,

4, Sit}`shln }ai ildsxu}im mj}j `l}` j tyuu`s} }idalhdhjl.t sid`visx d`ouy}is,

=, Midsxu}hln }ai mj}j,

9, Dsij}hln j li~ cjdgyu ti} ̀ f }ai midsxu}im mj}j,

6, Us`vhmhln }ai mj}j cjdg }` }ai ytis ̀ l j sijm/`lbx li}~`sg tajsi,

>, Ajvhln }ai ytis sit}`si jlm si/ildsxu} }ai mj}j f`s aht ̀ s ais ̀ ~l yti,

Jb}islj}hvibx" myi }` }ai d`t}t hlv`bvim" midhth`lt `l ~ail }` tuilm bhoh}im tyuu`s}

sit`ysdit `l tyda }jtgt ohna} us`ahch} }ai mj}j sid`visx iff`s} iqdiu} hl dsh}hdjb djtit"

}aisicx miushvhln t`oi ytist `f jdditt }` }aihs b`t} mj}j,

^h}a gix jsdahvjb" tyuu`s} t}jff oyt} sit}`si `lbx }ai ytis .t ushvj}i gix }` iljcbi }ai ytis }`

midsxu} aht `s ais `~l mj}j j} ~hbb, Gix jsdahvjb jlm sid`visx cilifh}t }ai ytis cx hous`vhln

tyuu`s} tisvhdit jlm tuiimhln jdditt }` }ai ildsxu}im mj}j" ~ahbi simydhln tyuu`s} d`t}t f`s

}ai il}isushti, Jmmh}h`ljbbx" }ai sid`visx jnil} m`it l`} liim }` ajvi mhsid} jdditt }` }ai

ildsxu}im oj}ishjb" us`vhmhln jl ivil nsij}is bivib `f tidysh}x f`s d`lfhmil}hjb cythlitt mj}j,

Gix Sid`visx Jnil}t

@lbx ytist ~h}a tuidhfhd shna}t djl uisf`so gix sid`visx, ^ail ytis gixt jsi jsdahvim" }aix

jsi ildsxu}im ~h}a }ai gix sid`visx jnil}.t uycbhd gix jlm t}`sim hl }ai DJ mj}jcjti, ]ai

Page 22: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 22/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 33

ui`ubi ~a` a`bm }ai gix sid`visx jnil} dis}hfhdj}i ojx ci tiujsj}i fs`o }a`ti ~a` jsi jcbi

}` si}shivi }ai ildsxu}im cb`c fs`o }ai DJ, Jt j sityb}" }ai ui`ubi jy}a`sh{im }` si}shivi

jsdahvim gix cb`c fs`o }ai DJ mj}jcjti ojx l`} u`ttitt }ai gix sid`visx jnil} dis}hfhdj}i

jlm gix liimim }` midsxu} }ai cb`c, ]a`ti ~a` m` u`ttitt }ai gix sid`visx jnil}

dis}hfhdj}i jlm gix ojx l`} ajvi jdditt }` }ai DJ mj}jcjti, Hl }aht tdiljsh`" }` sid`vis j

b`t} gix" oyb}hubi ui`ubi fs`o mhffisil} ns`yut oyt} ci hlv`bvim hl }ai us`ditt,

]` us`vhmi fys}ais tidysh}x `f }ai ahnabx tilth}hvi gix sid`visx jnil} dis}hfhdj}i jlm ushvj}i

gix" Ohds`t`f} H] ytit j ATO }` t}`si jlm aibu us`}id} }aht gix `l sid`visx ~`sgt}j}h`lt, Hl

}aht tdiljsh`" ijda mithnlj}im gix sid`visx jnil} ajt j ATO hlt}jbbim `l aht `s ais

~`sgt}j}h`l, Jdditt }` }ai sid`visx jnil} gix sizyhsit }aht o`mybi,

Miuilmildhit

Tivisjb miuilmildhit jsi sizyhsim f`s jl `snjlh{j}h`l }` }jgi jmvjl}jni `f gix jsdahvjb jlm

sid`visx;

  Gix jsdahvjb djl ci iljcbim `lbx `l visth`l 3 `s visth`l 4 }ioubj}it,

  Gix jsdahvjb jlm sid`visx djl ci uisf`soim `lbx `l ^hlm`~t Tisvis 3554 Il}isushti

Imh}h`l" ^hlm`~t Tisvis 3554 Mj}jdil}is Imh}h`l" ^hlm`~t Tisvis 3551 Il}isushti"

^hlm`~t Tisvis 3551 Mj}jdil}is" ^hlm`~t Tisvis 3551 S3 Il}isushti" `s ^hlm`~t

Tisvis 3551 S3 Mj}jdil}is t`f}~jsi syllhln Dis}hfhdj}i TisvhditJM DT,

  ]ai DTU }aj} ht ytim }` nilisj}i }ai gix oyt} ci jcbi }` iqu`s} }ai gix, F`s iqjoubi"

}ai Ohds`t`f} DTU }aj} Ohds`t`f} H] ytit ~h}a h}t tojs} djsm hlfsjt}syd}ysi ht djujcbi `f j

`li/}hoi iqu`s} `f h}t ushvj}i gix" f`s }ai uysu`ti `f gix jsdahvjb, O`t} tojs} djsm DTUt"

a`~ivis" djll`} iqu`s} ushvj}i gixt jlm sibx `l gixt cihln dsij}im ibti~aisi jlm

hou`s}im tidysibx }` }ai tojs} djsm,

L`}i; F`s o`si hlf`soj}h`l jc`y} }ai gix jsdahvjb jlm sid`visx us`ditt" sifis }` }ai ~ah}i 

ujuis #Gix Jsdahvjb jlm Ojljnioil} hl ^hlm`~t Tisvis 3551# j} 

a}}u;}idali},ohds`t`f},d`oil/ytbhcsjsxii==8=18!^T,:5(,jtuq , 

TTB

TTB ht j us`}`d`b }aj} us`vhmit jy}ail}hdj}h`l jlm ildsxu}h`l djujchbh}hit f`s ~ic cs`~tist"

li}~`sg mivhdit" jlm `}ais d`llid}h`l/sibj}im }idal`b`nhit,

Hl }ai ujt}" Ohds`t`f} uysdajtim TTB dis}hfhdj}it fs`o j l`l/Ohds`t`f} UGH us`vhmis cx

usiujxhln f`s j bjsni zyjl}h}x `l j xijsbx cjtht, Jmmh}h`ljbbx" }` ojljni }ai httyjldi `f

}a`ti dis}hfhdj}it }` }ai ilm ytis jlm us`vhmi }idalhdjb tyuu`s}" Ohds`t`f} H] ajm j t}jff `f

}~` jmohlht}sj}`st ~a` ~isi ils`bbim hl}` }ai l`l/Ohds`t`f} TTB jmohlht}sj}h`l tisvhdi"

~ahda jbt` sizyhsim }ai yti `f #jmohlht}sj}`s#/}xui TTB dis}hfhdj}i }aj} liimim }` ci ujhm f`s

jlm sili~im `l j uish`mhd cjtht, ]aht juus`jda ~jt j thnlhfhdjl} d`t} }` }ai d`oujlx"

}jghln hl}` jdd`yl} }ai bjsni u`uybj}h`l `f ~ic tisvist }aj} Ohds`t`f} H] oyt} ojhl}jhl }` syl

}ai d`oujlx.t ~ic cjtim tisvhdit,Jt j sityb}" Ohds`t`f} H] midhmim }` yti Dis}hfhdj}i Tisvhdit jlm hl}s`mydi jl hl}isljb UGH }aj}

~`ybm httyi h}t `~l TTB dis}hfhdj}it }` Ohds`t`f} ~ic tisvis jmohlht}sj}`st" cy} j} }ai tjoi

}hoi us`vhmi j uycbhd s``} }syt} cx dajhlhln }` j l`l/Ohds`t`f} s``}, Ohds`t`f} H] houbioil}im

jl `ffbhli hl}isoimhj}i DJ }aj} ht thnlim cx }ai N]I Dxcis]syt} Nb`cjb S``}, ]ai

hl}isoimhj}i DJ thnlt jl il}isushti httyhln DJ }aj} ht mimhdj}im }` TTB, ]`mjx" }ai TTB DJ

Page 23: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 23/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 34

httyit }a`ytjlmt `f dis}hfhdj}it }aj} jsi ytim c`}a hlthmi jlm `y}thmi }ai d`oujlx" ~h}a

thnlhfhdjl}bx b`~is `uisj}h`ljb d`t}t,

]` ojljni }ai httyjldi `f TTB dis}hfhdj}it" Ohds`t`f} H] d`bbjc`sj}im ~h}a jl hl}isljb

mivib`uoil} }ijo jlm dsij}im j dyt}`o sinht}sj}h`l jy}a`sh}x }``b }aj} ht l`~ cihln ytim }`

tisvhdi hl}isljb TTB d`ltyoist, Jbb TTB dis}hfhdj}i sizyit}t oyt} n` }as`yna }aht }``b7 l`

mhsid} ils`bboil} ht jbb`~im, ]ai DJ ajt ciil d`lfhnysim }` jbb`~ `lbx ils`bboil} sizyit}t}aj} `shnhlj}i fs`o }ai sinht}sj}h`l jy}a`sh}x }``b, ]ai ils`bboil} hl}isfjdi ilf`sdit }ai

cythlitt sybit !jt mi}isohlim cx Ohds`t`f}( }aj} tyuu`s} h}t jchbh}x }` d`l}hlyi }` ci dajhlim

ylmis j uycbhdjbbx }syt}im s``},

Cif`si j ytis djl sizyit} jl TTB dis}hfhdj}i }as`yna }ai }``b" ai `s tai oyt} `c}jhl jl

jy}a`sh{j}h`l f`s }ai th}i, ]ai jy}a`sh{j}h`l us`ditt iltysit }aj} j vjbhm cythlitt kyt}hfhdj}h`l

ht usitil}im jlm jbb us`uis juus`vjb ht sidihvim cif`si jlx fys}ais jd}h`l djl ci }jgil, Jf}is

}aj} ajt ciil jdd`oubhtaim" }ai ytis djl tyddittfybbx t}js} tycoh}}hln aht `s ais dis}hfhdj}i

sizyit}t vhj }ai }``b, @lbx sizyit}t f`s }ai juus`vim m`ojhl ljoi ~hbb ci jbb`~im7 sizyit}t

f`s jlx jmmh}h`ljb th}it oyt} f`bb`~ }ai tjoi us`ditt jt mitdshcim usivh`ytbx,

Jl`}ais gix fij}ysi }aj} }ai hl}isljb sinht}sj}h`l jy}a`sh}x juubhdj}h`l us`vhmit ht j tisvhdi

}aj} l`}hfhit j mht}shcy}h`l bht} !us`vhmim cx }ai sizyit}`s jlm sizyhsim f`s ils`bboil}( 45 mjxt"> mjxt" jlm : mjx cif`si }ai dis}hfhdj}i iquhsj}h`l mj}i, ]aht fyld}h`ljbh}x aibut usivil}t

tisvhdi hl}issyu}h`lt cx iljcbhln }hoibx sili~jbt,

^hsibitt

^hsibitt li}~`sghln iljcbit ytist }` ijthbx jdditt sit`ysdit `l j d`su`sj}i li}~`sg

~h}a`y} ajvhln }` ojhl}jhl j uaxthdjb li}~`sg d`llid}h`l, ]` us`vhmi tidysi jy}ail}hdj}h`l

}` d`oujlx sit`ysdit" j us`uis jy}ail}hdj}h`l oidajlhto oyt} ci uy} hl ubjdi, Ohds`t`f} H]

houbioil}im j d`ochlj}h`l `f 153,:Q jy}ail}hdj}h`l ~h}a dis}hfhdj}it jlm IJU/]BT,

Ohds`t`f} H] da`ti }` ilf`sdi }ai yti `f c`}a ytis jlm d`ouy}is dis}hfhdj}it f`s 153,:Q

jy}ail}hdj}h`l, ^ail j d`ouy}is d`oit `lbhli jlm j}}iou}t }` jdditt }ai li}~`sg hl `smis

}` b`n `l }` }ai m`ojhl" h} oyt} usitil} j vjbhm d`ouy}is dis}hfhdj}i, ^ail h} m`it t`" }aijy}ail}hdj}h`l sizyit} ht us`dittim" jlm hf tyddittfyb" }ai d`ouy}is ht d`llid}im }` }ai

li}~`sg, Jf}is }ai d`ouy}is ht d`llid}im }` }ai li}~`sg" }ai l`sojb d`ouy}is jy}ail}hdj}h`l

`ddyst" jlm l`sojb us`dittit tyda jt Ns`yu U`bhdx yumj}it djl `ddys, Cx }ai }hoi }ai

d`ouy}is jy}ail}hdj}h`l ajt `ddyssim" }ai txt}io ht sijmx f`s ytis b`n`l, ]ai us`ditt `f

jy}ail}hdj}hln }ai d`ouy}is jlm `c}jhlhln li}~`sg jdditt ush`s }` ytis b`n`l iljcbit }ai

ytis }` uisf`so jl `lbhli hl}isjd}hvi b`n`l" jt `uu`tim ythln djdaim dsimil}hjbt,

Jf}is }ai ytis tyddittfybbx b`nt `l}` }ai d`ouy}is" j ta`s} mibjx `ddyst cif`si }ai txt}io

j}}iou}t }ai 153,:Q ytis jy}ail}hdj}h`l, ]ai txt}io j}}iou}t }` uisf`so jl 153,:Q

jy}ail}hdj}h`l" cx ythln }ai ytis dis}hfhdj}i" thohbjs }` }ai `li uisf`soim vhj }ai d`ouy}is

dis}hfhdj}i, Hf }ai jy}ail}hdj}h`l j}}iou} fjhbt" }ai ~hsibitt li}~`sg jdditt ht ms`uuim, Hf h}

tyddiimt" }ai txt}io siojhlt `l }ai li}~`sg,

]` iljcbi ytis/cjtim jlm ojdahli/cjtim dis}hfhdj}i jy}ail}hdj}h`l" Ohds`t`f} H] sibhim `l

}ai miub`xoil} `f }ai iqht}hln y}hbh}x DJt" ~ahda iljcbim jy}`oj}hd ils`bboil} f`s m`ojhl/

oiocis" jy}ail}hdj}im ytist jlm d`ouy}ist, Cidjyti }ai dis}hfhdj}i us`vhth`lhln us`ditt

~jt jy}`oj}im" tyddittfyb ils`bboil} sizyhsim l` jmmh}h`ljb jd}h`l, Ytis jlm d`ouy}is

dis}hfhdj}it ytim f`s ~hsibitt jsi httyim `y} `f }asii y}hbh}x DJt hl }ai ushojsx d`su`sj}i

Page 24: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 24/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 3=

f`sit}, Cx ythln ds`tt/f`sit} ils`bboil} djujchbh}hit hl ^hlm`~t Tisvis 3551 S3" }ai DJt djl

tisvhdi ytist jlm d`ouy}ist hl `}ais m`ojhlt ~aisi j }syt} iqht}t,

LJU

LJU ht j }idal`b`nx hl}s`mydim hl }ai ^hlm`~t Vht}j jlm ^hlm`~t Tisvis 3551 `uisj}hln

txt}iot, H} hldbymit dbhil} jlm tisvis d`ou`lil}t }aj} iljcbi jmohlht}sj}`st }` dsij}i jlm

ilf`sdi u`bhdhit }aj} mifhli }ai sizyhsim t`f}~jsi jlm txt}io d`lfhnysj}h`lt f`s d`ouy}ist

}aj} d`llid} }` }ai d`su`sj}i li}~`sg, LJU ilf`sdit dbhil} aijb}a cx hltuid}hln jlm

jttitthln dbhil} d`ouy}ist" bhoh}hln li}~`sg jdditt ~ail dbhil} d`ouy}ist jsi miioim

l`ld`oubhjl}" jlm sioimhj}hln l`ld`oubhjl} dbhil} d`ouy}ist f`s ylbhoh}im li}~`sg jdditt,

T`oi `f }ai ilf`sdioil} d`ochlj}h`lt hldbymi;

  LJU ~h}a HUtid ilf`sdioil} !Ohds`t`f} H] houbioil}j}h`l(

  LJU ~h}a 153,:Q ilf`sdioil}

  LJU ~h}a VUL ilf`sdioil}

  LJU ~h}a Mxljohd A`t} D`lfhnysj}h`l Us`}`d`b !MADU( ilf`sdioil}

  LJU/LJD !Li}~`sg Jmohtth`l D`l}s`b( ilf`sdioil}

J LJU houbioil}j}h`l ytyjbbx d`ltht}t `f }ai f`bb`~hln d`ou`lil}t; LJU dbhil}t" j LJU

ilf`sdioil} u`hl}" jlm j LJU aijb}a u`bhdx tisvis !j tisvis }aj} ht syllhln Li}~`sg U`bhdx

Tisvis WLUT_(, Jmmh}h`ljbbx" LJU ~h}a HUtid/tuidhfhd ilf`sdioil} sizyhsit j DJ tisvis jlm j

Aijb}a Sinht}sj}h`l Jy}a`sh}x !ASJ( f`s httyhln LJU aijb}a dis}hfhdj}it }` dbhil}t hl `smis }`

d`ooylhdj}i `l }ai HUtid/us`}id}im li}~`sg,

]ai ASJ.t situ`lthchbh}x ht }` vjbhmj}i dbhil} dsimil}hjbt jlm f`s~jsm j dis}hfhdj}i sizyit} }`

}ai LJU DJ `l ciajbf `f }ai dbhil}, ]ai ASJ vjbhmj}it dis}hfhdj}i sizyit}t cx daidghln ~h}a

}ai LJU u`bhdx tisvis }` mi}isohli ~ai}ais }ai LJU dbhil} d`oubhit ~h}a li}~`sg aijb}a

sizyhsioil}t,

LJU dis}hfhdj}i sizyhsioil}t hldbymi }ai f`bb`~hln;

  Tyckid} ljoi; Tyuubhim hl }ai sizyit},

  Juubhdj}h`l u`bhdhit; Dbhil} jy}ail}hdj}h`l" LJU aijb}a !dyt}`o(" HUtid Hl}isli} Gix

Iqdajlni !HGI(,

  Vjbhmh}x uish`m; >3 a`yst ~h}a l` sili~jb,

  Ils`bboil} jdditt; ASJ jdd`yl}t `lbx,

  Jvjhbjchbh}x; Hljchbh}x }` ni} j LJU dis}hfhdj}i ~`ybm giiu j dbhil} `ff }ai li}~`sg,

Ohds`t`f} H] houbioil}im thq DJt mimhdj}im }` httyhln LJU dis}hfhdj}it, ]ai DJt jbb dajhl }`

}ai Ohds`t`f} D`su`sj}i S``} DJ jlm jsi b`dj}im hl }ai ushojsx d`su`sj}i f`sit}, Cx ythln

ds`tt/f`sit} ils`bboil} hl ^hlm`~t Tisvis 3551 S3" }ai DJt djl tisvhdi sizyit}t f`s dbhil}t

jds`tt oyb}hubi f`sit}t ~aisi j }syt} iqht}t, ]ai DJt jsi uaxthdjbbx b`dj}im hl }asii ojk`s

Ohds`t`f} mj}j dil}ist js`ylm }ai ~`sbm }` us`vhmi zyhdg httyjldi `f LJU dis}hfhdj}it jlmus`vhmi simylmjldx hl }ai ivil} `f j mhtjt}is,

]ai sijt`l f`s it}jcbhtahln tyda j ta`s} vjbhmh}x uish`m" jt ~ibb jt l` sili~jb vjbyi `l }ai

ASJ/`lbx dis}hfhdj}i }ioubj}i" ht }` ilf`sdi o`si fsizyil} t}j}i daidgt }aj} oyt} ujtt

}as`yna }ai ASJ, LJU dis}hfhdj}i }ioubj}it d`l}jhl }ai Dbhil} Jy}ail}hdj}h`l juubhdj}h`l

u`bhdx, F`s }ai dis}hfhdj}it }` yti }aht u`bhdx" Ohds`t`f} H] liimim }` uycbhta ivisx LJU DJ

dis}hfhdj}i }` }ai L]Jy}a d`l}jhlis `f ivisx LJU/ilf`sdim f`sit},

Page 25: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 25/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 39

Cidjyti `f }ai d`oubiq ils`bboil} b`nhd hlv`bvim hl ivjbyj}hln vjsh`yt ujsjoi}ist `l

oyb}hubi ils`bboil} sizyit}t" }ai LJU DJt t}js}im }` iqahch} oyda ahnais oio`sx

d`ltyou}h`l d`oujsim }` jlx `}ais DJ, Jmmh}h`ljbbx" }ai ta`s} vjbhmh}x uish`m `l }ai LJU

dis}hfhdj}i }ioubj}it }shnnisim j thnlhfhdjl}bx bjsnis lyocis `f httyim dis}hfhdj}it, Ohds`t`f} H]

}``g }ai f`bb`~hln jd}h`lt }` jmmsitt }aiti d`ldislt;

  Hldsijti }ai mj}jcjti titth`l d`yl} `l ijda DJ }` 455, ]aht dajlni jbb`~im f`s joyda bjsnis lyocis `f sizyit}t }` ci us`dittim uis tid`lm,

  Hldsijti uaxthdjb oio`sx }` 1 NC,

Ohds`t`f} H] f`ylm }aj} LJU nilisj}im j bjsni lyocis `f httyim dis}hfhdj}it, ]ai lyocis `f

dis}hfhdj}it djytim }ai DJ mj}jcjti }` ni} visx bjsni" ~ahda hl }ysl djytim iqditthvi mhtg

ytjni, Cidjyti LJU dis}hfhdj}it jsi ta`s} bhvim jlm }aisi ht l` liim f`s siv`dj}h`l" }aisi ht

l` liim }` ojhl}jhl sid`smt `f httyim LJU dis}hfhdj}it, ^h}a jl yunsjmi `f }ai LJU DJt }`

^hlm`~t Tisvis 3551 S3" Ohds`t`f} H] ~jt jcbi }` houbioil} }ai #mj}jcjtibitt DJ# fij}ysi

}aj} jbb`~im LJU dis}hfhdj}it }` l`} ci }sjdgim hl }ai hl}isljb DJ mj}jcjti, Hlt}ijm `f

uisf`sohln mj}jcjti dbijl/yu }jtgt jf}is }a`ytjlmt `f dis}hfhdj}it ajvi jbsijmx ciil httyim"

}aht fij}ysi usivil}t }ai dis}hfhdj}i fs`o il}ishln }ai Httyim Dis}hfhdj}it mj}jcjti

jb}`ni}ais”jf}is h} ht iljcbim `l }ai DJ !syllhln ^hlm`~t Tisvis 3551 S3( jlm j tuidhfhd

}ioubj}i !d`lfhnysim vhj ^hlm`~t Tisvis 3551 S3 `s ^hlm`~t >(,

Page 26: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 26/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 36

US@MYD] YUMJ]IT JLM JTT@DHJ]IM HLFSJT]SYD]YSI

DAJLNIT 

^hlm`~t Tisvis 3551 jlm ^hlm`~t Tisvis 3551 S3 ajvi hl}s`mydim dis}hfhdj}i tisvhdi —

sibj}im ilajldioil}t" hldbymhln }ai f`bb`~hln;

  ^hlm`~t Tisvis 3551;

  Hous`vim ils`bboil} djujchbh}hit }aj} iljcbi mibinj}im ils`bboil} jnil}t }` ci

jtthnlim `l j uis/}ioubj}i cjtht

  Ilajldim uisf`sojldi o`lh}`shln ~h}a }ai jmmh}h`l `f li~ uisf`sojldi d`yl}ist

  Tdjbjcbi" ahna/tuiim siv`dj}h`l t}j}yt situ`lti tisvhdit }aj} d`ochli DSBt jlm

hl}insj}im @lbhli Situ`lmis tisvhdit

  Tyuu`s} f`s Dsxu}`nsjuax Liq} Nilisj}h`l !DLN( }` iljcbi }ai yti `f Tyh}i C

jbn`sh}aot

  Ilajldim tisvhdi o`lh}`shln ~h}a }ai hl}s`myd}h`l `f }ai ^hlm`~t Tisvis 3551 JM

DT Ojljnioil} Ujdg f`s Ohds`t`f} @uisj}h`lt Ojljnis 3559

  O`si mi}jhbim tisvis jmohlht}sj}h`l ~h}a sit}shd}im dis}hfhdj}i ojljnist

  Fjhb`vis dbyt}is tyuu`s}

  ^hlm`~t Tisvis 3551 S3;

  Ds`tt/f`sit} ils`bboil} djujchbh}x }aj} jbb`~t f`s d`lt`bhmj}h`l `f iqht}hln ajsm~jsi

  Mj}jcjtibitt DJ fij}ysi }` jv`hm t}`shln yllidittjsx dis}hfhdj}i sid`smt

  Cit} Usjd}hdi Jljbx{is f`s hous`vim d`lfhnysj}h`l usjd}hdit

  ^ic/cjtim dis}hfhdj}i ils`bboil} us`}`d`b }` jbb`~ ils`bboil} `vis }ai Hl}isli}

Ds`tt/F`sit} Ils`bboil} jlm Tisvis D`lt`bhmj}h`l

Uisajut `li `f }ai chnnit} dajbbilnit hl ojljnhln j oyb}hubi/f`sit} UGH ht }ai liditth}x }`

ohss`s }ai `shnhljb d`lfhnysj}h`l }` }ai `}ais tyuu`s}im f`sit}t" myi }` }ai bjdg `f ds`tt/f`sit}

ils`bboil} fyld}h`ljbh}x, Tyda j bhoh}j}h`l ajt jb~jxt izyj}im }` myubhdj}im jmohlht}sj}hviiff`s}t jlm jmmh}h`ljb ajsm~jsi d`t}, ^hlm`~t Tisvis 3551 S3 jmmsittit }aiti dajbbilnit

~h}a }ai hl}s`myd}h`l `f ds`tt/f`sit} ils`bboil},

Ds`tt/f`sit} ils`bboil} l`~ jvjhbjcbi hl ^hlm`~t Tisvis 3551 S3 aibut `snjlh{j}h`lt

d`lt`bhmj}i }aihs hlfsjt}syd}ysi cx iljcbhln ytist jlm d`ouy}ist fs`o f`sit}t C" D" jlm M }`

ils`bb fs`o j DJ tisvis hl f`sit} J, ]aj} ht jdd`oubhtaim cx d`uxhln }ai lidittjsx JM MT

`ckid}t fs`o f`sit} J !sit`ysdi f`sit}( }` f`sit} C !jdd`yl} f`sit}( jlm iljcbhln sifissjb `l

}ai ^hlm`~t Tisvis 3551 S3 DJ,

Hl Ojsda 3558" Ohds`t`f} H] cinjl yumj}hln h}t hlfsjt}syd}ysi cx iljcbhln ds`tt/f`sit}

ils`bboil} f`s ojlx `f h}t hl}isljbbx d`ltyoim tisvhdit" hldbymhln LJU" ~hsibitt" jlm HUtid,

Hl usiujsj}h`l f`s }aht hou`s}jl} ohbit}`li" Ohds`t`f} H] mhm l`} sili~ }ai DJ dis}hfhdj}it f`s

}ai DJt }aj} ~isi mithnlj}im f`s si}hsioil} hl }ai jdd`yl} f`sit}t, Ohds`t`f} H] ~hbb d`l}hlyi}` ojhl}jhl }ai DSBt f`s }ai siojhlmis `f }ai `bm DJ dis}hfhdj}it. bhfi}hoi" jlm ~hbb si}hsi }ai

DJt jf}is }a`ti dis}hfhdj}it iquhsi, Fhnysi 4 ta`~t }ai f`sit} vhi~ `f }ai Ohds`t`f} H] UGH

jf}is }ai houbioil}j}h`l `f ds`tt/f`sit} ils`bboil},

Page 27: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 27/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 3>

Fhnysi 4, Httyhln DJt cx f`sit}

Ni`nsjuahdjbbx Mhtcystim UGH

]ai hl}s`myd}h`l `f LJU jlm h}t sizyhsioil}t f`s visx ta`s}/bhvim dis}hfhdj}it jlm sibhjldi `l

jbo`t} hlt}jl}jli`yt ils`bboil} jchbh}hit us`mydim }ai liim f`s l`} `lbx oyb}hubi DJt }`

iltysi tisvhdi jvjhbjchbh}x" cy} jbt`”f`s }ai fhst} }hoi hl Ohds`t`f} H] aht}`sx”}` a`t} httyhln

DJt hl sio`}i b`dj}h`lt" hl db`tis us`qhoh}x }` }ai dbhil}, Jt j sityb}" Ohds`t`f} H] d`bbjc`sj}im

~h}a h}t hl}islj}h`ljb mj}j/dil}is ojljnioil} }ijot jlm cyhb} tidysi b`dj}h`lt }` a`t} LJU

DJt j} hl}islj}h`ljb mj}j dil}ist, Ohds`t`f} H] }ail lin`}hj}im tuidhjb tidysh}x us`dimysit

~h}a sio`}i }ijot }` iltysi }a`ti DJt" ~ahda ~isi l` b`lnis uaxthdjbbx ojhl}jhlim cx }ai

Ohds`t`f} H] UGH t}jff" siojhlim d`oubhjl} ~h}a }ai ahna tidysh}x sizyhsioil}t f`s }ai sit} `f

}ai hlfsjt}syd}ysi,

Cidjyti }ai sio`}i DJt ~isi l` b`lnis hl uaxthdjb djsi `f }ai ushojsx UGH t}jff" Ohds`t`f}

H] midhmim }` uy} }ai ATOt }aj} aibu us`}id} }a`ti DJt hl}` tiujsj}i tidysh}x c`ylmjshit,

]aht ~jx" hf }a`ti o`mybit ~isi d`ous`ohtim `l }ai ~jx }` }ai sio`}i mj}j dil}ist" `lbx

}ai gixt ~h}ahl }aj} c`ylmjsx ~`ybm ci jffid}im" jlm l` ajso ~`ybm ci m`li }` }ai `}ais

DJt,

Page 28: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 28/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 31

Myi }` }ai hl}s`myd}h`l `f }ai usivh`ytbx oil}h`lim tisvhdit }` }ai Ohds`t`f} ilvhs`loil}"

Ohds`t`f} H] liimim }` hldbymi jmmh}h`ljb DJt jlm ojgi `}ais dajlnit }` h}t ahisjsdax,

Fhnysi = ta`~t }ai hlfsjt}syd}ysi `f }ai }ahsm/ujs}x s``},

Mhtjt}is Sid`visx

Mhtjt}is sid`visx f`s j UGH d`ltht}t ojhlbx `f }ai f`bb`~hln jd}h`lt;

  Iltysi }aj} syl}hoi d`ou`lil}t tyda jt DSB mht}shcy}h`l u`hl}t jlm JHJ b`dj}h`lt

d`l}hlyi }` ci jvjhbjcbi jlm yu }` mj}i" jlm }aj} ytist `f iqht}hln dis}hfhdj}it djl

d`l}hlyi }` fyld}h`l ~h}a`y} hl}issyu}h`l, ]aht hldbymit }ai jchbh}x }` siv`gi dis}hfhdj}it jt

liimim, ]aht ht vh}jb f`s jbb dis}hfhdj}i }xuit,

  Iltysi }aj} li~ ils`bboil}t jlm sili~jbt djl ci us`dittim, Miuilmhln `l }ai ytjni

`f }ai dis}hfhdj}it" }aht ojx ci vh}jb }` houbioil} hooimhj}ibx, Hl t`oi djtit" }ai tisvhdi

ojx ci jcbi }` ~h}at}jlm t`oi m`~l}hoi, F`s iqjoubi" tisvhdit tyda jt LJU djll`}

jff`sm }` ci ~h}a`y} li~ httyjldi" ~aisijt tojs} djsm jlm TOHOI dis}hfhdj}it ojx ci

o`si bilhil},

Ohds`t`f} H] hlvit}im thnlhfhdjl} }hoi hl dsij}hln jlm vjbhmj}hln j mhtjt}is sid`visx ubjl f`s

}ai d`su`sj}i UGH, Ohds`t`f} H] cinjl }ai us`ditt cx hmil}hfxhln }ai mhtjt}is tdiljsh`t }aj} h}liimim }` oh}hnj}i, Ohds`t`f} H] mi}isohlim }aj} h} liimim }` ci jcbi }` ~h}at}jlm j bjsni/

tdjbi lj}ysjb mhtjt}is }aj} mit}s`xt jbb mj}j sithmhln j} }ai ushojsx d`su`sj}i mj}j dil}is, ]`

oh}hnj}i }aht shtg jlm `}aist" Ohds`t`f} H] houbioil}im }ai f`bb`~hln }idalhdjb yumj}it;

Fhnysi 4, Httyhln DJt cx sinh`l

Page 29: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 29/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 38

  Sid`visx `f `ffbhli DJt, Ohds`t`f} H] ubjdim cjdgyu ajsm~jsi jlm t`f}~jsi `l

t}jlmcx hl j tid`lmjsx mj}j dil}is, ]aht hldbymit tisvist jlm ATOt, Jmmh}h`ljbbx"

Ohds`t`f} H] }jgit sinybjs cjdgyut `f }ai `ffbhli DJ gix oj}ishjb jlm dis}hfhdj}i

mj}jcjtit" jlm }ail t}`sit }aio j} }ai tid`lmjsx mj}j dil}is, ATO jd}hvj}h`l }`gilt

jsi t}`sim j} j tidysi `ff/th}i b`dj}h`l, Ohds`t`f} H] ubjdim j ahna hou`s}jldi `l

ojhl}jhlhln }ai tjoi ahna bivib `f tidysh}x j} }ai tid`lmjsx b`dj}h`l }aj} iqht}im j} }ai

ushojsx th}i,

  Sid`visx `f `lbhli DJt, Dsij}h`l `f sid`visx ubjlt f`s `lbhli DJt vjshim cx }ai }xui `f

dis}hfhdj}it }aj} }ai DJ httyim, LJU httyhln DJt ~isi jbsijmx simylmjl} jds`tt oyb}hubi

DJt hl oyb}hubi sinh`lt" jlm sid`visx ubjlt d`ltht}im `f usiujshln li~ DJt }aj}

Ohds`t`f} H] d`ybm uy} hl}` tisvhdi jt liimim }` siubjdi }ai b`t} DJt, Sid`visx ubjlt f`s

t`oi DJt sizyhsim }ai sid`visx `f }ai iqht}hln DJ fs`o j usivh`yt cjdgyu }` j li~

d`ouy}is, Ohds`t`f} H] dsij}im j mimhdj}im vhs}yjb ojdahli ilvhs`loil} cx ythln

^hlm`~t Tisvis fjhb`vis dbyt}ishln jlm ^hlm`~t Tisvis Axuis/V }` a`t} ojlx `f }ai

DJt hl }ai tid`lmjsx mj}j dil}is jt vhs}yjb ojdahlit,

  ]iou`sjsx DSB uycbhdj}h`l, Ohds`t`f} H] houbioil}im j mimhdj}im d`ouy}is ~h}a

ATOt }aj} djl ci ytim }` sithnl iqht}hln DSBt jt liimim yl}hb j DJ djl ci sit}`sim,

]aht sizyhsit j d`ux `f j DSB jlm }ai d`ssid} jdditt }`gilt }` hlh}hjbh{i }ai ATO" jb`ln

~h}a }ai dis}hfhdj}i jlm gix mj}j }` ci usitil} `l }ai d`ouy}is, Cx ythln }ai

dis}y}hb,iqi —thnl d`oojlm" jl jmohlht}sj}`s djl sithnl j DSB f`s jl iq}ilmim

uish`m" jbb`~hln }ai il}isushti }` fyld}h`l yl}hb }ai DJ djl ci fybbx sit}`sim, ]ai DSB

}ail oyt} ci ojlyjbbx uycbhtaim }` }ai juus`ushj}i mht}shcy}h`l b`dj}h`lt,

H} ht hou`s}jl} }` l`}i }aj} hl jmmh}h`l }` houbioil}hln }ai d`ssid} }idalhdjb t`by}h`l }` aibu

us`}id} }ai d`lfhmil}hjbh}x" hl}insh}x" jlm jvjhbjchbh}x `f dsh}hdjb UGH tisvhdit" jl `snjlh{j}h`l

oyt} houbioil} }ai us`uis us`dittit jlm us`dimysit, Ohds`t`f} H] djsifybbx houbioil}im

sid`visx us`dittit }aj} h} d`ybm sijbht}hdjbbx iqidy}i hl }ai ivil} `f j mhtjt}is" jlm h} }it}im

}aio f`s vjbhmh}x,

Page 30: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 30/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 45

DJ TISVIS OJLJNIOIL] JLM TYUU@S] 

Ohds`t`f} H].t dyssil} UGH tyuu`s} o`mib hldbymit }ai f`bb`~hln }hist;

  ]his :; Ohds`t`f} Tisvhdi Mitg !oyb}hubi oiocist(, Jbb ytis ilzyhsit `shnhlj}i j} }aht

}his, ]idalhdhjl jtgt ytist j tishit `f zyit}h`lt }` aibu mhsid} }aio }` }ai juus`ushj}i

}ijo,

  ]his 3; Ohds`t`f} Nb`cjb @uisj}h`lt }ijo !oyb}hubi oiocist(, ]ai Nb`cjb

@uisj}h`lt }ijo sidihvit itdjbj}h`lt fs`o }ai Tisvhdi Mitg" `s t`oi}hoit fs`o `}ais

hlfsjt}syd}ysi tyuu`s} }ijot hf jl httyi ajt jbsijmx ciil hmil}hfhim, ]aht }ijo jbt`

sidihvit jlm situ`lmt }` jbb UGH o`lh}`shln jbis}t, J Nb`cjb @uisj}h`lt jljbxt} }ail

cinhlt hlvit}hnj}h`l jlm f`bb`~t tyuu`s} js}hdbit usiujsim cx }ai Ohds`t`f} H] UGH }ijo,

Ivil }a`yna Nb`cjb @uisj}h`lt t}jff oiocist ajvi ciil us`vhth`lim ~h}a DJ jdditt"

}aix jsi l`} UGH iquis}t7 hf }aix sidihvi j sizyit} }aj} sizyhsit o`si hl/miu}a gl`~bimni

`f Dis}hfhdj}i TisvhditJM DT" }aix f`s~jsm }ai sizyit} }` ]his 4 hl }ai tyuu`s} o`mib,

  ]his 4; Dis}hfhdj}i Tisvhdit @uisj}h`lt }ijo !f`ys oiocist(, ]aht }ijo ojljnit

dis}hfhdj}i ils`bboil}" siv`dj}h`l" jlm sid`visx `f Ohds`t`f} H] httyim dis}hfhdj}it, H} jbt`

us`vhmit jttht}jldi ~h}a }s`ycbita``}hln `f tuidhfhd UGH ytjni tdiljsh`t,

  ]his =; Dis}hfhdj}i Tisvhdit Ilnhliishln }ijo !}asii oiocist(, ]aht }ijo ojljnit

}ai miub`xoil} `f li~ dsxu}`nsjuahd t`by}h`lt" hmil}hfhit ta`s}fjbbt hl }ai dyssil}

hlfsjt}syd}ysi" jlm us`u`tit jlm miub`xt li~ mithnl dajlnit, H} jbt` sidihvit

itdjbj}h`l sizyit}t fs`o ]his 4 jlm aibut sit`bvi `uisj}h`ljb httyit, Hl }ai djti `f jl

`visbx d`oubiq djti `s j u`}il}hjb t`f}~jsi cyn" }ai }ijo hlv`bvit }ai UGH us`myd}

ns`yu" jlm }ail c`}a }ijot ~`sg }`ni}ais }` fhlm jlm m`dyoil} j t`by}h`l,

Cjdgyu

Ohds`t`f} H] sinybjsbx cjdgt yu h}t `lbhli jlm `ffbhli DJt, @lbhli DJt jsi cjdgim yu `l j

mjhbx cjtht vhj j tdshu} syllhln jt j tdaimybim }jtg }aj} d`uhit }ai DJ mj}jcjti jlm sinht}sx

d`lfhnysj}h`l }` j sio`}i b`dj}h`l, ]aht d`ux ht }ail cjdgim yu jlm t}`sim }` }jui, Ohds`t`f}

H] midhmim }` ioub`x tyda cjdgyu usjd}hdit }` usitisvi }ai bhoh}im jdditt }` DJ tisvist,

]aht ~jx" oyb}hubi oiocist `f }ai cjdgyu `snjlh{j}h`l jsi l`} sizyhsim }` ajvi jdditt }`

}ai DJ tisvist }aiotibvit7 }aix `lbx liim }` ci jcbi }` jdditt }ai sio`}i b`dj}h`l }aj}

d`l}jhlt }ai tuidhfhd fhbit lidittjsx f`s cjdgyu,

Ohds`t`f} H] cjdgt yu h}t `ffbhli DJt ivisx }hoi jf}is thnlhln j li~ tyc`smhlj}i DJ dis}hfhdj}i

sizyit}, DJ mj}jcjti" sinht}sx hlf`soj}h`l" jlm lDhuais gix us`}id}h`l —sibj}im fhbit jsi jbb

d`uhim }` }~` d`uhit `f DMt" ~ahda jsi }ail t}`sim j} }~` tiujsj}i" tidysi `ff/th}i b`dj}h`lt,

Hl }ai ivil} `f j d`ssyu}im DJ" }ai cjdgim/yu mj}j djl ci ytim }` tyddittfybbx sit}`si }ai

tisvhdit `l}` j mhffisil} uhidi `f ajsm~jsi ~h}a j us`uisbx d`lfhnysim lDhuais o`mybi,

O`lh}`shln

Tisvhdi o`lh}`shln ht dsh}hdjb }` us`myd}h`l `uisj}h`lt, Ohds`t`f} H] sibhit `l j d`ochlj}h`l `fOhds`t`f} Txt}io Dil}is @uisj}h`lt Ojljnis jlm j dyt}`o Dis}hfhdj}i TisvhditJM DT

o`lh}`shln }``b }` `vistii }ai aijb}a `f h}t UGH,

Jl @uisj}h`lt Ojljnis houbioil}j}h`l j} Ohds`t`f} d`ltht}t `f j o`lh}`shln tisvis" aijb}a

jnil}t" jlm j ti} `f ojljnioil} ujdgt" ijda tuidhfhd }` j ujs}hdybjs jsij cihln o`lh}`sim,

Ohds`t`f} H] miub`xim o`lh}`shln jnil}t }` ivisx DJ hl h}t ojljnim ilvhs`loil}, ]ai

jnil}t syl jlm uisf`so }ai daidgt ilf`sdim cx ijda ojljnioil} ujdg" jlm }ail siu`s} }`

Page 31: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 31/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 4:

}ai ojljnioil} tisvis, Fs`o }aisi" jl jy}`oj}hd }hdgi}hln txt}io nilisj}it tyuu`s} }hdgi}t

jlm f`s~jsmt }a`ti }` }ai Nb`cjb @uisj}h`lt ns`yu,

]ai dyt}`o Dis}hfhdj}i TisvhditJM DT o`lh}`shln }``b sylt `l ivisx DJ jt ~ibb, H}t k`c ht }`

uisf`so Dis}hfhdj}i TisvhditJM DT/tuidhfhd daidgt" hldbymhln vishfxhln }aj} }ai tisvhdi ht

syllhln" }ai DSB uycbhdj}h`l `ddyssim `l }hoi" }ai DJ dis}hfhdj}i ht l`} lijshln h}t iquhsj}h`l

mj}i" jlm jbb JHJ jlm DSB mht}shcy}h`l u`hl} uj}at d`l}jhl }ai iquid}im mj}j, Hf }ai }``bhmil}hfhit jlx mhtdsiujldhit" h} ~sh}it ivil}t hl}` jl ivil} b`n, ]ai ivil} b`n }shnnist jbis}t

}aj} jsi nilisj}im ~h}a }ai aibu `f @uisj}h`lt Ojljnis,

C`}a }ai @uisj}h`lt Ojljnis jnil} jdd`yl} jlm }ai tisvhdi jdd`yl} ytim cx }ai dyt}`o

o`lh}`shln }``b syl ~h}a bhoh}im uisohtth`lt `l }ai DJt, ]aix ajvi sijm jlm ~sh}i jdditt }`

`lbx }ai liimim ivil} b`nt" f`s }ai uysu`ti `f b`nnhln }ai ivil}, ]aht aibut usivil} j

u`}il}hjb j}}jdg `l }ai tisvis hf ih}ais `f }a`ti jdd`yl}t ht d`ous`ohtim,

T`f}~jsi Yumj}it

]` ojgi tysi }aj} }ai DJ tisvist jsi yu }` mj}i `l jbb t`f}~jsi yumj}it" hldbymhln fhqit jlm

tidysh}x yumj}it" Ohds`t`f} H] ytit Ohds`t`f} Txt}io Dil}is D`lfhnysj}h`l Ojljnis 355>,

D`lfhnysj}h`l Ojljnis hldbymit j tisvis jlm jl jnil} d`ou`lil}" ~aisi }ai jnil} sylt `livisx DJ jlm juubhit j ti} `f yumj}it cjtim `l }ai hlf`soj}h`l }aj} h} ni}t fs`o }ai tisvis

syllhln D`lfhnysj}h`l Ojljnis, ]` ohlhoh{i houjd} }` us`myd}h`l `uisj}h`lt" }ai jnil}t jsi

d`lfhnysim }` `lbx iqidy}i }ai yumj}it jlm sit}js} }ai tisvis !hf lidittjsx( myshln `ff/a`yst,

]ai il}hsi us`ditt ht jy}`oj}im" ~ahda aibut jv`hm j u`}il}hjb jmohlht}sj}hvi `visaijm,

Ajsm~jsi Yunsjmit

Ohds`t`f} H] f`bb`~t }ai tjoi ajsm~jsi sifsita tdaimybi }aj} ht f`bb`~im cx }ai sit} `f }ai

miujs}oil}t ~h}ahl }ai d`oujlx" ~ahda hldbymit yunsjmhln }ai ajsm~jsi d`ou`lil}t

juus`qhoj}ibx ivisx fhvi xijst, ^ail j ajsm~jsi yunsjmi ht lidittjsx" }ai Ohds`t`f} UGH

}ijo cjdgt yu }ai dyssil} tisvis" }jgit h} `ffbhli" jlm }ail sit}`sit }ai cjdgyu `l }ai li~bx

cyhb} tisvis,

Page 32: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 32/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 43

YUD@OHLN HLH]HJ]HVIT 

Ojlx li~ fij}ysit jsi cihln hl}s`mydim }` UGH/cjtim }idal`b`nhit }`mjx, Aisi jsi t`oi

gix jsijt }aj} Ohds`t`f} H] ~hbb f`dyt `l liq};

  FHO Dis}hfhdj}i Ojljnioil}, ]ai Dis}hfhdj}i Ojljnis fij}ysi `f FHO ht j dil}sjbh{im

ojljnioil} txt}io f`s miub`xhln jlm ojljnhln dis}hfhdj}it jlm tojs} djsmt, Ohds`t`f}

H] ht dyssil}bx ilnjnim hl j Dis}hfhdj}i Ojljnis uhb`} jlm ojx houbioil} }ai fij}ysi f`s

jbb f`sit}t hl }ai lijs fy}ysi,

  Jmmh}h`ljb ds`tt/f`sit} ils`bboil} jlm ajsm~jsi d`lt`bhmj}h`l iff`s}t, Ohds`t`f} H]

ajt nsij}bx thoubhfhim }ai JM DT jsdah}id}ysi cx hl}s`mydhln ds`tt/f`sit} ils`bboil},

Iff`s}t jsi ylmis~jx }` houbioil} ds`tt/f`sit} ils`bboil} f`s tisvhdit }aj} ajvi l`} xi}

}jgil jmvjl}jni `f h},

  Vhs}yjbh{j}h`l, ^h}a }`mjx.t iff`s}t }` ohlhoh{i `visjbb hlfsjt}syd}ysi ojljnioil} d`t}t"

vhs}yjb tisvis —cjtim tisvhdit jsi mshvhln ojlx miub`xoil} n`jbt, ]ai Ohds`t`f} UGH

}ijo ht d`lthmishln o`vhln o`t} !hf l`} jbb( `f h}t UGH tisvist }` vhs}yjb ojdahli —cjtim

hlfsjt}syd}ysi, Jt ujs} `f }ai hlh}hj}hvi" li}~`sg/cjtim ATOt ~`ybm cid`oi }ai ushojsx

gix t}`sjni oidajlhtot, A`~ivis" }ai Ohds`t`f} UGH }ijo gl`~t }aj} h} oyt} }jgi

tuidhjb djsi }` jdd`yl} f`s }ai jmmh}h`ljb tidysh}x d`ldislt `f syllhln hl j vhs}yjbilvhs`loil},

  F`bb`~hln gix ojljnioil} t}jlmjsmt”ohnsj}hln fs`o :"53=/ch} STJ gixt, LHT]

httyim Tuidhjb Uycbhdj}h`l 155/9>" Sid`ooilmj}h`l f`s Gix Ojljnioil}" ~ahda

jmvhtit }aj} :53=/ch} STJ gixt ~`ybm l` b`lnis ci vhjcbi jf}is Midiocis 4:" 35:5,

Ohds`t`f} H] ajt cinyl ohnsj}h`l }` 3"5=1/ch} STJ gixt f`s tivisjb dis}hfhdj}i }xuit,

  F`bb`~hln dsxu}`nsjuahd t}jlmjsmt”ohnsj}hln fs`o TAJ/: }` TAJ/396, LHT]

Tuidhjb Uycbhdj}h`l 155/9> jbt` jmvhtit j }sjlth}h`l fs`o TAJ/: }` TAJ/396 jt }ai ajta

jbn`sh}ao ytim f`s mhnh}jb thnlj}ysit f`s Dis}hfhdj}i Jy}a`sh}hit, Ohds`t`f} H] ajt cinyl

}ai ubjllhln jlm mithnl us`ditt }` yumj}i }ai hlfsjt}syd}ysi ~h}a DJt }aj} yti TAJ/396

jlm }aj} ~hbb l`} mhtsyu} }ai dyssil} UGH,

F`s o`si hlf`soj}h`l jc`y} }ai gix ohnsj}h`l t}jlmjsmt" sifis }` }ai uycbhdj}h`l j}a}}u;dtsd,lht},n`vuycbhdj}h`ltlht}uyct155/9>tu155/9>PUJS]4Pgix/

ojljnioil}PMid3558,umf, 

Page 33: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 33/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 44

BITT@LT BIJSLIM JLM CIT] USJD]HDIT 

Cx }a`s`ynabx ivjbyj}hln mi}jhbim tisvhdi sizyhsioil}t jlm fy}ysi ns`~}a u`}il}hjb" Ohds`t`f}

H] bijslim tivisjb vjbyjcbi bitt`lt }aj} djl ci juubhim jt cit} usjd}hdit hl o`t} `}ais UGH

miub`xoil} ubjlt, Ohds`t`f} H] bijslim ojlx `f }ai bitt`lt myshln }ai miub`xoil} jlm t`oi

`f }ai bitt`lt jt `y}d`oit `f }ai miub`xoil},

Ubjl f`s Fy}ysi Yunsjmit }` }ai ^hlm`~t Tisvis UGH

Hf yunsjmhln fs`o ^hlm`~t Tisvis 3555 Tisvis }` `c}jhl jbb }ai cilifh}t jtt`dhj}im ~h}a }ai

^hlm`~t Tisvis 3554 `s ^hlm`~t Tisvis 3551 UGH" }ai JM MT tdaioj oyt} ci iq}ilmim j}

bijt} }` }ai visth`l us`vhmim ~h}a ^hlm`~t Tisvis 3554, Jmmh}h`ljbbx" dbhil} d`ouy}ist

ta`ybm ci syllhln ^hlm`~t QU Us`fitth`ljb `s ^hlm`~t Vht}j,

]ai fhst} t}iu hl usiujshln f`s }ai yunsjmi ht }` ubjl f`s }ai tdaioj iq}ilth`l, Jl

`snjlh{j}h`l oyt} syl Jmusiu,iqi ~h}a }ai F`sit}Usiu d`oojlm/bhli t~h}da }` iq}ilm }ai

tdaioj cif`si jlx `}ais ~`sg d`ooildit,

Djsifybbx D`lthmis }ai Lyocis `f DJ Tisvist Liimim

Jl `snjlh{j}h`l ta`ybm ci sijbht}hd jc`y} }ai lyocis `f DJt }aj} h} liimt }` miub`x, ^ail jl

`snjlh{j}h`l ytit JM DT" h} m`it l`} liim }` dsij}i tiujsj}i DJt f`s mhffisil} juubhdj}h`lt,

Ijda DJ djl httyi jbb }ai dis}hfhdj}it }aj} jsi hl yti hl }aj} f`sit},

Ohds`t`f} H] sijbh{im }aj} }ai lyocis `f DJt miub`xim hl }ai `shnhljb ubjlt dsij}im

yllidittjsx jmohlht}sj}hvi d`oubhdj}h`lt jlm `visaijm, Mid`oohtth`lhln t`oi ylmisytim

DJt jlm d`lt`bhmj}hln }aihs dis}hfhdj}i }ioubj}it }` `}ais DJt us`vim }` ajvi l` iffid} `l

uisf`sojldi" cy} xhibmim thnlhfhdjl} tjvhlnt hl tisvis ajsm~jsi jlm `ln`hln ojhl}iljldi, Hl

th}yj}h`lt ~aisi ils`bboil} tisvhdit jsi dsh}hdjb" Ohds`t`f} H] ioub`xt oyb}hubi DJt"

d`lfhnysim hmil}hdjbbx" }` us`vhmi fjhb`vis simylmjldx,

D`lthmis Hl}insj}h`l ~h}a j Uycbhd S``}

Jl `snjlh{j}h`l ta`ybm d`lthmis a`~ h} ~hbb jmmsitt }ai httyi `f s``} }syt} f`s uycbhd/fjdhln

UGH/iljcbim tisvhdit, Houbioil}hln `lbx j tibf/thnlim s``} DJ ~hbb l`} us`vhmi s``} }syt} f`s

ytist `y}thmi }ai c`ylmt `f j li}~`sg ilvhs`loil}, Miuilmhln `l jl `snjlh{j}h`l.t liimt

jlm }ai td`ui `f h}t miub`xoil}" }aisi jsi }~` ushojsx ~jxt }aj} jl `snjlh{j}h`l djl

jmmsitt }aht us`cbio; H} djl ih}ais uysdajti hlmhvhmyjb dis}hfhdj}it jt liimim `s tyc`smhlj}i

h}t `~l DJ ylmis j uycbhdbx }syt}im s``},

Ohds`t`f} H] houbioil}im j li~ `ffbhli hl}isoimhj}i DJ }aj} dajhlt }` }ai uycbhdbx }syt}im

N]I Dxcis]syt} S``} jlm N]I Dxcis]syt} Nb`cjb S``}, ]ai `ffbhli hl}isoimhj}i DJ

tyc`smhlj}it oyb}hubi httyhln DJt" ~ahda djl httyi c`}a TTB jlm TOHOI dis}hfhdj}it,

Uysdajthln }ai lidittjsx TTB dis}hfhdj}it }as`yna jl `snjlh{j}h`l `y}thmi Ohds`t`f}

siusitil}im j thnlhfhdjl} d`t} f`s Ohds`t`f}, ^h}a }ai yti `f }ai li~" uycbhdbx }syt}im

hlfsjt}syd}ysi" Ohds`t`f} H].t hl}isljb UGH sijbh{it thnlhfhdjl} tjvhlnt, Ohds`t`f} H] ujxt jl

jllyjb fii f`s tyc`smhlj}h`l }` j uycbhdbx }syt}im s``} jlm djl httyi jl ylbhoh}im lyocis `fdis}hfhdj}it" sj}ais }ajl ujxhln f`s ijda dis}hfhdj}i httyim, Jmmh}h`ljbbx" Ohds`t`f} hldsijtim h}t

d`l}s`b `vis }ai dis}hfhdj}i httyjldi us`ditt cx ajlmbhln }ai httyjldi `f jbb ilm/il}h}x

dis}hfhdj}it hl}isljbbx,

Page 34: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 34/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 4=

Jy}`oj}i DSB Uycbhdj}h`l

]ai jvjhbjchbh}x `f vjbhm DSBt ht dsydhjb f`s ylhl}issyu}im `uisj}h`l cx UGH/iljcbim tisvhdit

jlm juubhdj}h`lt, Jy}`oj}hln DSB uycbhdj}h`l }` iq}isljb b`dj}h`lt djl ci dajbbilnhln

cidjyti o`t} il}isushtit m` l`} d`llid} }aihs uycbhd/fjdhln ~ic tisvist mhsid}bx }` d`su`sj}i

li}~`sg sit`ysdit, ]aisi jsi }xuhdjbbx fhsi~jbbt jlm uishoi}is li}~`sgt }aj} ht`bj}i uycbhdbx

jddittim tisvist fs`o `}ais tisvist,

^hlm`~t Tisvis 3554 DJt djl ci d`lfhnysim }` jy}`oj}hdjbbx ~sh}i li~ DSB fhbit }` tajsit

`l `}ais tisvist" ~aisijt ^hlm`~t 3555 Tisvis sizyhsit tiujsj}i us`dimysit }` uisf`so

}aht fyld}h`l, ]aht hous`vioil} iljcbim Ohds`t`f} H] }` simydi h}t iq}isljb DSB uycbhdj}h`l

hl}isvjbt fs`o `ldi j ~iig }` `ldi ivisx 3= a`yst f`s tyda }hoi/tilth}hvi dis}hfhdj}it jt

}a`ti ytim f`s tojs} djsm sio`}i jdditt b`n`lt, Ohds`t`f} H] DJt l`~ ~sh}i }aihs DSB

oj}ishjb mhsid}bx }` j tuidhfhd ms`u u`hl}, J uish`mhd txldas`lh{j}h`l s`y}hli jy}`oj}hdjbbx

sylt" jddittit }ai mj}j `l }ai ms`u u`hl}" jlm ojgit }ai mj}j jvjhbjcbi `l }ai iq}isljbbx

fjdhln ~ic tisvist hl j }hoibx ojllis,

Dyt}`oh{i }ai DSB Uycbhdj}h`l @visbju Hl}isvjb

]ai `visbju ci}~iil }ai }hoi ~ail j li~ DSB ht httyim jlm }ai }hoi ~ail jl `bm DSB

iquhsit liimt }` ci ojljnim, ^h}a DSB uycbhdj}h`l hl JM MT" siubhdj}h`l }hoi oyt} ci

d`lthmisim, Ohds`t`f} H] liimim }` us`vhmi tyffhdhil} }hoi f`s siubhdj}h`l `f }ai li~bx

uycbhtaim DSB cif`si }ai `bm DSB iquhsim jlm ~`ybm l` b`lnis ci vjbhm f`s dis}hfhdj}i

vjbhmj}h`l uysu`tit, Jmmh}h`ljbbx" ~h}a iq}isljb A]]U YSBt" Ohds`t`f} H] liimim il`yna }hoi

}` us`vhmi f`s ojlyjb uycbhdj}h`l `f li~bx httyim DSBt }` }aiti u`hl}t,

F`s mi}jhbim hlf`soj}h`l jc`y} mifhlhln DSB uycbhdj}h`l `visbju" sifis }` }ai ~ah}i ujuis

#Cit} Usjd}hdit f`s Houbioil}hln j Ohds`t`f} ^hlm`~t Tisvis 3554 Uycbhd Gix Hlfsjt}syd}ysi#

j} a}}u;}idali},ohds`t`f},d`oil/ytbhcsjsxdd>48689!^T,:5(,jtuq, 

Yti Li~ Gixt f`s DJ Sili~jb

Ohds`t`f} H] sid`ooilmt sili~hln DJ dis}hfhdj}it cx ythln li~ gixt sj}ais }ajl siythln }ai

`bm gixt, Ythln li~ gixt f`s DJ sili~jb simydit }ai bhgibha``m `f ajvhln jlx jochny`yt `shous`uis dis}hfhdj}i dajhlt hl }ai ahisjsdax,

Ythln iqht}hln gixt f`s dis}hfhdj}i sili~jb ojx djyti dis}hfhdj}i dajhlt }` bhlg }` ih}ais }ai `bm

`s }ai li~ DJ dis}hfhdj}i" dsij}hln jochny`yt dis}hfhdj}i dajhlt, A`~ivis" hf jl `snjlh{j}h`l

ytit j li~ gix myshln DJ dis}hfhdj}i sili~jb" }ai dis}hfhdj}i dajhlt m`~l }ai bhli ~hbb yti

`lbx }ai li~ gix" }aisicx ibhohlj}hln jlx jochnyh}x,

Ythln j li~ gix m`it l`} csijg }ai dajhlt dsij}im f`s ilm/il}h}x dis}hfhdj}it httyim ylmis

}ai `bm DJ dis}hfhdj}i, Usivh`ytbx httyim dis}hfhdj}it ~hbb d`l}hlyi }` dajhl }` }ai juus`ushj}i

DJ dis}hfhdj}i, A`~ivis" oyb}hubi gixt sizyhsi oyb}hubi DSBt, Myshln siv`dj}h`l daidghln" j

DSB oyt} ci thnlim cx }ai tjoi gix ytim }` thnl }ai ilm/il}h}x dis}hfhdj}i, Jt j sityb} `f

ythln li~ gixt f`s DJ sili~jb" }ai DJ oyt} httyi j DSB f`s ijda vjbhm gix }` aibu iltysi

}ai vjbhmh}x `f }ai dis}hfhdj}it httyim, Cidjyti `f }ai hou`s}jldi `f DSB jvjhbjchbh}x hl

tyddittfybbx ojljnhln }ai httyjldi `f li~ gixt f`s DJ sili~jb" jl `snjlh{j}h`l ta`ybm ubjl

h}t DSB us`ujnj}h`l t}sj}inx djsifybbx,

Oyb}hubi DSB fhbit jlm DJ dis}hfhdj}i fhbit jsi }xuhdjbbx mhffisil}hj}im }as`yna }ai jmmh}h`l `f j

gix visth`l tyffhq }` }ai fhbi ljoi, F`s }aht sijt`l" Ohds`t`f} H] sid`ooilmt ythln }ai

juus`ushj}i vjshjcbi ~ail mifhlhln DSB mht}shcy}h`l u`hl} jlm JHJ iq}ilth`lt,

Page 35: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 35/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 49

Ubjl f`s Dis}hfhdj}i Httyjldi U`bhdhit

]ai ^hlm`~t Tisvis 3554 `s ^hlm`~t Tisvis 3551 UGH hldbymit dis}hfhdj}i u`bhdhit jlm

juubhdj}h`l u`bhdhit !iq}ilmim gix ytjni !IGY( hl ^hlm`~t 3555 Tisvis(, Ijda }xui `f

u`bhdx ajt h}t `~l ylhzyi `ckid} hmil}hfhis !@HM( vjbyit, ]aiti @HM vjbyit jsi ~sh}}il hl}`

d`ssitu`lmhln iq}ilth`lt ~h}ahl }ai dis}hfhdj}i, F`s j dis}hfhdj}i }` ci vjbhm f`s jlx tuidhfhd

uysu`ti" }ai juus`ushj}i @HM f`s }aj} uysu`ti oyt} ci usitil} ~h}ahl }ai juus`ushj}i u`bhdxiq}ilth`l, F`s iqjoubi" f`s jl ilm/il}h}x dis}hfhdj}i }` ci vjbhm f`s IFT ytjni" }ai IFT @HM

vjbyi oyt} ci usitil} hl }ai juubhdj}h`l u`bhdx iq}ilth`l f`s ivisx dis}hfhdj}i hl }ai dajhl,

Cx mifjyb}" j s``} DJ dis}hfhdj}i ht vjbhm f`s jbb juubhdj}h`l u`bhdhit jlm jbb dis}hfhdj}i u`bhdhit,

A`~ivis" cx mifjyb}" tyc`smhlj}i DJt jsi vjbhm `lbx f`s jbb juubhdj}h`l u`bhdhit, Cx ythln }ai

vjbyi `f #jbb# f`s }aiti u`bhdhit" ivisx juubhdj}h`l `s httyjldi u`bhdx @HM" ~ai}ais sid`nlh{im

`s l`}" ht d`lthmisim vjbhm, A`~ivis" tuidhfxhln jlx hlmhvhmyjb u`bhdx @HM `visshmit }ai #jbb#

vjbyi, ^ail }ai #jbb# vjbyi ht `visshmmil" j ujs}hdybjs u`bhdx oyt} ci iqubhdh}bx mifhlim hl }ai

u`bhdx }` ci d`lthmisim vjbhm,

Hlh}hjbbx" Ohds`t`f} H] mhm l`} jl}hdhuj}i ythln httyjldi u`bhdhit, Ta`s}bx jf}is }ai hlh}hjb

miub`xoil} us`ditt" Ohds`t`f} H] ubjllim }` hldbymi jl httyis t}j}ioil} hl }ai s``}

dis}hfhdj}i, ]aht t}j}ioil} hldbymim j tujdi ~h}ahl }ai dis}hfhdj}i f`s iocimmhln binjbmhtdbjhoist `s `}ais h}iot `f sifisildi" jlm h} hldbymim j axuisbhlg }` }ai Ohds`t`f}

Dis}hfhdj}h`l Usjd}hdi T}j}ioil} DUT, ]ai DJ hl}isusi}im }ai hldbyth`l `f }ai httyis

t}j}ioil} jt jl httyjldi u`bhdx" ~ahda }aisicx hlvjbhmj}im jbb `}ais u`tthcbi httyjldi

u`bhdhit, Hlh}hjbbx" }aht th}yj}h`l ~jt l`} j us`cbio, A`~ivis" ~ail Ohds`t`f} H] midhmim }`

jdd`oo`mj}i }ai u`}il}hjb yti `f httyjldi u`bhdit hl h}t httyhln DJt" h} j}}iou}im }` sili~

}ai hl}isoimhj}i dis}hfhdj}it jlm hldbymi }ai Jbb Httyjldi U`bhdhit vjbyi ~h}ahl }aio jt ~ibb,

Cidjyti }ai Jbb Httyjldi U`bhdhit vjbyi ajm ciil `visshmmil hl }ai s``} dis}hfhdj}i ~h}a }ai

hldbyth`l `f }ai httyjldi t}j}ioil}" }ai iffid}hvi httyjldi u`bhdhit hl }ai hl}isoimhj}i DJ

dis}hfhdj}it ~isi }ail sit}shd}im }` `lbx }ai httyjldi t}j}ioil} u`bhdx,

]` si/iljcbi }ai Jbb Httyjldi U`bhdhit fyld}h`ljbh}x" Ohds`t`f} H] ajm }` sili~ }ai s``}

dis}hfhdj}i, ]` us`vhmi }aht fyld}h`ljbh}x" hl jmmh}h`l }` }ai mithsim httyis t}j}ioil}" Ohds`t`f}

H] liimim }` o`mhfx }ai Dju`bhdx,hlf fhbi }` hldbymi }ai tuidhfhd Jbb Httyjldi U`bhdhit @HM

jb`ln ~h}a }ai juus`ushj}i hlf`soj}h`l f`s }ai httyis t}j}ioil}, Ohds`t`f} H] }ail siuij}im

}aht d`lfhnysj}h`l cx sili~hln ijda `f }ai `ffbhli hl}isoimhj}i DJt }` oj}da }ai #jbb#

fyld}h`ljbh}x `f }ai s``}, ]ai `lbhli il}isushti tyc`smhlj}i DJt" a`~ivis" ajvi l` httyjldi

u`bhdhit mifhlim" }ayt bhoh}hln }ai yti `f jlx httyjldi u`bhdhit hl dis}hfhdj}it }aj} }aix httyi, Hf

ivis sizyhsim hl }ai fy}ysi" Ohds`t`f} H] djl ijthbx houbioil} liimim u`bhdhit cx thoubx

sili~hln }ai httyhln DJ dis}hfhdj}i jlm hldbymhln }ai u`bhdhit,

Ohds`t`f} H] sid`ooilmt }aj} jbb miub`xoil}t `f UGH }aj} hld`su`sj}i }ai yti `f tyc`smhlj}i

DJt ta`ybm ubjl f`s }ai yti `f httyjldi u`bhdhit, Ubjllhln f`s httyjldi u`bhdhit f`sdit }ai

d`lthmisj}h`l `f ~ahda tuidhfhd ilajldim gix ytjni jlm httyjldi u`bhdhit jl `snjlh{j}h`l

~hbb iljcbi ~ail h} miub`xt j DJ, Jb}islj}hvibx" tidysh}x jmohlht}sj}`st djl dajlni }ai mifjyb}

ti}}hlnt f`s httyjldi u`bhdhit `l }ai tyc`smhlj}i DJt }` oj}da }ai s``}, Hl ih}ais djti"

d`lthmisj}h`l `f }aht fjd}`s j} }ai ubjllhln t}jni `f j miub`xoil} ~hbb ibhohlj}i }ai liim }`

sili~ }ai dis}hfhdj}i dajhl fs`o }ai s``} m`~l ivisx }hoi jl `snjlh{j}h`l liimt j li~

ilajldim gix ytjni `s httyjldi u`bhdx,

Page 36: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 36/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 46

F`s o`si hlf`soj}h`l jc`y} ti}}hln u`bhdhit hl }ai Dju`bhdx,hlf fhbi" sifis }` }ai ~ah}i ujuis

#Cit} Usjd}hdit f`s Houbioil}hln j Ohds`t`f} ^hlm`~t Tisvis 3554 Uycbhd Gix Hlfsjt}syd}ysi#

j} a}}u;}idali},ohds`t`f},d`oil/ytbhcsjsxdd>48689!^T,:5(,jtuq, 

Tjlh}h{i Ibioil}t `f }ai UGH

Ohds`t`f} H] mhtd`visim }aj} httyim dis}hfhdj}it ohna} d`l}jhl u`}il}hjbbx tilth}hvi hlf`soj}h`l

jc`y} }ai Ohds`t`f} hlfsjt}syd}ysi, Cx mifjyb}" BMJU uj}at iqubhdh}bx mifhlhln }ai Ohds`t`f} JM

MT t}syd}ysi ~isi t}`sim hl }ai DSB mht}shcy}h`l u`hl} jlm JHJ iq}ilth`lt, Ohds`t`f} H] da`ti

}` sio`vi }aht hlf`soj}h`l fs`o h}t DJ jlm ilm/il}h}x dis}hfhdj}it f`s sijt`lt `f d`su`sj}i

d`lfhmil}hjbh}x,

Il}isushtit d`ldislim ~h}a }ai tidysh}x `f }aihs JM MT t}syd}ysit ta`ybm ubjl }` tjlh}h{i }aihs

dis}hfhdj}it `f jlx d`su`sj}i d`lfhmil}hjb hlf`soj}h`l }aj} }aix m` l`} ~jl} sibijtim

iq}isljbbx, Jl `snjlh{j}h`l ta`ybm hldbymi d`l}jd} hlf`soj}h`l hl }ai dis}hfhdj}it `lbx hf h}

~jl}t ytist }` ci jcbi }` yti }a`ti dajllibt f`s tyuu`s}, ]ai uycbhdj}h`l `f hl}isljb iojhb

jmmsittit `l }ai Hl}isli} djl bijm }` dyt}`ois siubhit jlm yl~jl}im iojhb, @ffhdhjb d`l}jd}

hlf`soj}h`l ht o`si juus`ushj}ibx ubjdim hl jl `snjlh{j}h`l.t uycbhdbx sibijtim DUT

m`dyoil}j}h`l,

Iltysi Tisvhdi Jvjhbjchbh}x f`s Ahna/Miojlm Juubhdj}h`lt

Djsifybbx iqjohli }ai sizyhsioil}t `f ijda UGH/iljcbim tisvhdi" hldbymhln }ai fsizyildx j}

~ahda dis}hfhdj}it jsi httyim" }ai lyocis `f tyda sizyit}t" jlm }ai u`}il}hjb houjd} }` }ai

tisvhdi hf simylmjldx jlm juus`ushj}i jvjhbjchbh}x jsi l`} jdd`yl}im f`s, Jl `snjlh{j}h`l

ta`ybm d`lfhnysi h}t DJt ~h}a il`yna oio`sx }` us`ditt jbb sizyit}t jlm }` iljcbi }ai

li~bx jvjhbjcbi fij}ysit !tyda jt Mj}jcjtibitt DJ fij}ysi( }` usivil} }ai tisvist fs`o

syllhln `y} `f mhtg tujdi,

Yti Ajsm~jsi Tidysh}x O`mybit

Ohds`t`f} H] ahnabx sid`ooilmt }ai yti `f jl ATO }` aibu tidysi }ai gixt `f jlx us`myd}h`l

DJ, T`f}~jsi DTUt m` l`} us`vhmi t}s`ln us`}id}h`l `f }ai DJ gix hl }ai ivil} `f j DJ

d`ous`ohti jlm djll`} ilf`sdi t}s`ln d`l}s`bt js`ylm gix ytjni, ^ail jl `snjlh{j}h`l ht

midhmhln ~ai}ais }` houbioil} jl ATO jt ujs} `f j UGH" h} ta`ybm djsifybbx d`lthmis }ai vjbyi

`f }ai hlf`soj}h`l }aj} }ai UGH ht aibuhln }` us`}id},

Ajvi j Dbijsbx Mifhlim U`bhdx

Cif`si jl `snjlh{j}h`l houbioil}t j UGH" h} ta`ybm dsij}i j dbijsbx mifhlim u`bhdx }aj} d`vist

j} j ohlhoyo;

  Httyjldi sizyhsioil}t f`s ijda }xui `f dis}hfhdj}i,

  Siv`dj}h`l us`dittit,

  DJ gix th{it jlm jbn`sh}aot,

  Uaxthdjbb`nhdjb tidysh}x `f DJt,  Ahna/bivib us`dimysit f`s ojghln dajlnit }` }ai UGH,

  ]ai bhfi dxdbi f`s ijda uycbhtaim dis}hfhdj}i }ioubj}i }aj} jmmsittit }aiti u`}il}hjb

ivil}t;

  Httyjldi

  Sid`visx

Page 37: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 37/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 4>

  Sili~jb

  Siv`dj}h`l

J fsjoi~`sg iqht}t f`s }ai dsij}h`l `f Dis}hfhdj}i U`bhdx jlm Dis}hfhdj}i Usjd}hdi T}j}ioil}

m`dyoil}t" #Hl}isli} Q,958 Uycbhd Gix Hlfsjt}syd}ysi; Dis}hfhdj}i U`bhdx jlm Dis}hfhdj}h`l

Usjd}hdit Fsjoi~`sg# !a}}u;~~~,hi}f,`snsfdsfd393>,}q}(, L`} jbb UGHt sizyhsi tyda f`sojb

m`dyoil}j}h`l" cy} mifhlhln u`bhdhit hl }ai cinhllhln djl aibu }ai houbioil}j}h`l n` o`sito``}abx,

Page 38: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 38/39

 

Miub`xhln jlm Ojljnhln UGH Hlthmi Ohds`t`f} Ujni 41

D@LDBYTH@L 

Cx mithnlhln" houbioil}hln" jlm tyuu`s}hln j UGH }aj} ytit j tibf/thnlim s``} DJ dis}hfhdj}i

f`s hl}isljb tidysh}x liimt jlm j tiujsj}i UGH dajhlim }` j uycbhd s``} f`s iljcbhln uycbhd/

fjdhln TTB jlm TOHOI sizyhsioil}t" Ohds`t`f} H] jdd`oubhtaim h}t n`jbt f`s }ai Ohds`t`f}

UGH houbioil}j}h`l, Cythlitt cilifh}t djl ci tyoojsh{im jt f`bb`~t;

  Hldsijtim tidysh}x, Ohds`t`f} ioub`xiit yti dsxu}`nsjuahd }idal`b`nhit jlm

juubhdj}h`lt ijda mjx, ]ai sio`}i jdditt b`n`l }` }ai d`su`sj}i li}~`sg ht

jdd`oubhtaim }as`yna tojs} djsmt, ]ai jchbh}x }` yti TOHOI ~ail iqdajlnhln iojhb

aibut nhvi tilmist" cx oijlt `f ildsxu}h`l" d`lfhmildi }aj} l` `li `}ais }ajl }ai

hl}ilmim sidhuhil} djl sijm oittjnit, ]ai jchbh}x }` yti TOHOI aibut nhvi sidhuhil}t"

cx oijlt `f mhnh}jb thnlj}ysit" d`lfhmildi }aj} }ai d`l}il}t `f oittjnit ajvi l`} ciil

jb}isim, ^h}a }ai yti `f TTB" ytist `f hl}sjli} jlm Hl}isli} ~icth}it djl iqdajlni

tilth}hvi mj}j }as`yna jl ildsxu}im d`llid}h`l,

  Juubhdj}h`l jlm tisvhdi d`ouj}hchbh}x, Miub`xhln j tibf/a`t}im Ohds`t`f} UGH iljcbit

Ohds`t`f} }ijot }` }it} ijda li~ Ohds`t`f} us`myd} f`s d`ouj}hchbh}x jlm hl}is`uisjchbh}x

~h}a ^hlm`~t Tisvis 3554" ^hlm`~t Tisvis 3551" jlm ^hlm`~t Tisvis 3551 S3 UGH

tisvhdit cif`si h} ht sibijtim }` }ai ojsgi},  Simydim dis}hfhdj}i d`t}t, Cif`si }ai dyssil} hlfsjt}syd}ysi" }ai d`t}t `f ythln j l`l/

Ohds`t`f} uycbhd DJ f`s dis}hfhdj}i mibhvisx `l j dis}hfhdj}i/cx/dis}hfhdj}i cjtht ~isi ahna,

Syllhln jl hl}isljb UGH j} Ohds`t`f} ajt simydim }aiti d`t}t, Hl jmmh}h`l" }ai li~ UGH

o`mib ajt simydim }ai sizyhsim tyuu`s} hlfsjt}syd}ysi cx iljcbhln }ai d`lt`bhmj}h`l `f

DJ tisvist hl ijda f`sit},

  Ijti `f ojljnijchbh}x, Cidjyti ^hlm`~t Tisvis 3554" ^hlm`~t Tisvis 3551" jlm

^hlm`~t Tisvis 3551 S3 `ffis UGH djujchbh}x `y} `f }ai c`q" j tibf/a`t}im UGH t`by}h`l

~jt ijtx }` houbioil} jlm ht ijtx }` ojljni,

  D`lf`sojldi }` hlmyt}sx t}jlmjsmt, Houbioil}hln jl il}isushti UGH iljcbit

Ohds`t`f} H] }` yti t}jlmjsmt/cjtim dsxu}`nsjuahd }idal`b`nhit }` aibu tidysi Ohds`t`f}

d`su`sj}i sit`ysdit, ]aiti }idal`b`nhit hldbymi ildsxu}im fhbit" f`bmist" ~hsibittd`ooylhdj}h`lt" iojhb" sio`}i li}~`sg jdditt" jlm ~ic tisvis d`llid}h`lt,

  Simydim `visjbb hlfsjt}syd}ysi ojljnioil} d`t}, Cx iljcbhln ds`tt/f`sit}

ils`bboil} jlm d`lt`bhmj}hln uaxthdjb ajsm~jsi" d`oujlhit djl dy} thnlhfhdjl} d`t}t

jtt`dhj}im ~h}a }ai ojljnioil} `f oyb}hubi DJt tdj}}isim jds`tt oyb}hubi f`sit}t,

Page 39: Public Key Infrastructure at Microsoft

8/4/2019 Public Key Infrastructure at Microsoft

http://slidepdf.com/reader/full/public-key-infrastructure-at-microsoft 39/39

 

F@S O@SI HLF@SOJ]H@L 

F`s o`si hlf`soj}h`l jc`y} UGH" sifis }` }ai f`bb`~hln t`ysdit,

  ^ah}i ujuist;

  #Gix Jsdahvjb jlm Ojljnioil} hl ^hlm`~t Tisvis 3551#

a}}u;}idali},ohds`t`f},d`oil/ytbhcsjsxii==8=18!^T,:5(,jtuq 

  #Cit} Usjd}hdit f`s Houbioil}hln j Ohds`t`f} ^hlm`~t Tisvis 3554 Uycbhd Gix

Hlfsjt}syd}ysi#

a}}u;}idali},ohds`t`f},d`oil/ytbhcsjsxdd>48689!^T,:5(,jtuq 

  ^icth}it;

  ^hlm`~t Tisvis 3551 S3 JM DT

a}}u;}idali},ohds`t`f},d`oil/yt~hlm`~ttisvismm==16:9 

  Fimisjb Hlf`soj}h`l Us`ditthln T}jlmjsmt

a}}u;dtsd,lht},n`vuycbhdj}h`ltfhut  

  Lj}h`ljb Hlt}h}y}i `f T}jlmjsmt jlm ]idal`b`nx Fimisjb UGH

a}}u;dtsd,lht},n`vugh  

F`s o`si hlf`soj}h`l jc`y} Ohds`t`f} us`myd}t `s tisvhdit" djbb }ai Ohds`t`f} Tjbit

Hlf`soj}h`l Dil}is j} !155( =36/8=55, Hl Djljmj" djbb }ai Ohds`t`f} Djljmj hlf`soj}h`l

Dil}si j} !155( 964/85=1, @y}thmi }ai 95 Ylh}im T}j}it jlm Djljmj" ubijti d`l}jd} x`ys

b`djb Ohds`t`f} tycthmhjsx, ]` jdditt hlf`soj}h`l }as`yna }ai ^`sbm ^hmi ^ic" n` }`;

a}}u;~~~,ohds`t`f},d`o 

a}}u;~~~,ohds`t`f},d`o}idali}h}ta`~djti 

]ai hlf`soj}h`l d`l}jhlim hl }aht m`dyoil} siusitil}t }ai dyssil} vhi~ ̀ f Ohds`t`f} D`su`sj}h`l ̀ l }ai httyit

mhtdyttim jt ̀ f }ai mj}i `f uycbhdj}h`l, Cidjyti Ohds`t`f} oyt} situ`lm }` dajlnhln ojsgi} d`lmh}h`lt" h}

ta`ybm l`} ci hl}isusi}im }` ci j d`ooh}oil} ̀ l }ai ujs} ̀ f Ohds`t`f}" jlm Ohds`t`f} djll`} nyjsjl}ii }ai

jddysjdx ̀ f jlx hlf`soj}h`l usitil}im jf}is }ai mj}i ̀ f uycbhdj}h`l,

]aht ̂ ah}i Ujuis ht f`s hlf`soj}h`ljb uysu`tit ̀ lbx, OHDS@T@F] OJGIT L@ ̂ JSSJL]HIT" IQUSITT"

HOUBHIM" @S T]J]Y]@SX" JT ]@ ]AI HLF@SOJ]H@L HL ]AHT M@DYOIL],

D`oubxhln ~h}a jbb juubhdjcbi d`uxshna} bj~t ht }ai situ`lthchbh}x ̀ f }ai ytis, Ohds`t`f} nsjl}t x`y }ai shna} }`

sius`mydi }aht ̂ ah}i Ujuis" hl ~a`bi `s hl ujs}" tuidhfhdjbbx jlm t`bibx f`s }ai uysu`ti ̀ f uist`ljb imydj}h`l,

Ohds`t`f} ojx ajvi uj}il}t" uj}il} juubhdj}h`lt" }sjmiojsgt" d`uxshna}t" ̀ s ̀ }ais hl}ibbid}yjb us`uis}x shna}t

d`vishln tyckid} oj}}is hl }aht m`dyoil}, Iqdiu} jt iqusittbx us`vhmim hl jlx ~sh}}il bhdilti jnsiioil} fs`o

Ohds`t`f}" }ai fyslhtahln ̀ f }aht m`dyoil} m`it l`} nhvi x`y jlx bhdilti }` }aiti uj}il}t" }sjmiojsgt"

d`uxshna}t" ̀ s ̀ }ais hl}ibbid}yjb us`uis}x,

Ylbitt ̀ }ais~hti l`}im" }ai iqjoubi d`oujlhit" ̀ snjlh{j}h`lt" us`myd}t" m`ojhl ljoit" iojhb jmmsittit"

b`n`t" ui`ubi" ubjdit" jlm ivil}t miuhd}im aisihl jsi fhd}h}h`yt" jlm l` jtt`dhj}h`l ~h}a jlx sijb d`oujlx"

`snjlh{j}h`l" us`myd}" m`ojhl ljoi" iojhb jmmsitt" b`n`" uist`l" ubjdi" ̀ s ivil} ht hl}ilmim ̀ s ta`ybm ci

hlfissim,

 ¨ 35:: Ohds`t`f} D`su`sj}h`l, Jbb shna}t sitisvim,

]aht m`dyoil} ht f`s hlf`soj}h`ljb uysu`tit ̀ lbx, OHDS@T@F] OJGIT L@ ̂ JSSJL]HIT" IQUSITT @SHOUBHIM" HL ]AHT TYOOJSX, Ohds`t`f}" Jd}hvi Mhsid}`sx" F`sifs`l}" Axuis/V" ̂ hlm`~t" ̂ hlm`~t J{ysi"

^hlm`~t Tisvis" jlm ̂ hlm`~t Vht}j jsi ih}ais sinht}isim }sjmiojsgt ̀ s }sjmiojsgt ̀ f Ohds`t`f} D`su`sj}h`l hl

}ai Ylh}im T}j}it jlm`s ̀ }ais d`yl}shit, ]ai ljoit ̀ f jd}yjb d`oujlhit jlm us`myd}t oil}h`lim aisihl ojx

ci }ai }sjmiojsgt ̀ f }aihs situid}hvi ̀ ~list,


Recommended