Public Key Authority Vs. Certificate Authority

<a href="http://draft.blogger.com/post-create.do" rel="thinbox" title="#jsArticleIntroImageCredit"></a><br /> Certificate Authorities provide an additional layer of security over Public Key Authorities.Fotolia.com"> Public Key Authorities, also known as Public Key Infrastructures (PKI), are the means by which transmitted data is encrypted in <a class="StrongLink" href="http://www.ehow.com/internet/">Internet</a> communications. Although messages may be safely sent through a PKI, a Certificate Authority (CA) insures that the Public Key is authentic.<br /> CyptographyCommunication in a Public Key system is asymmetric, meaning the sender and receiver do not need a common key to send encrypted messages. The sender needs to know the receiver's public key in order to send the message. For communication to remain private, however, the receiver needs to keep the sender's private key confidential.TrustBecause of asymmetric encryption, communication in a PKI should be secure. Problems arise when individuals or companies misrepresent themselves by assuming false identities, thus allowing confidential information to fall into the wrong hands.Certificate AuthorityCertificate Authorities are trusted third <a class="StrongLink" href="http://www.ehow.com/weddings-and-parties/">parties</a> that verify identities of websites holding Public Keys. The certificates issued contain names, addresses, phone numbers and other verifiable information, to determine whether the entity is real. Different vetting requirements are dependent on the type of certificate issued. Some certificates issued provide an additional encryption called a Secure Socket Layer (SSL) that makes communication more secure. Without a CA, one would have to verify the identity of a Public Key by offline means. References <a href="http://gdp.globus.org/gt3-tutorial/multiplehtml/ch10s03.html" rel="nofollow" target="_blank">Globus.org: Public Key Authority</a> <a href="http://gdp.globus.org/gt3-tutorial/multiplehtml/ch10s04.html" rel="nofollow" target="_blank">Globus.org: Certificates and Certificate Authorities</a> <a href="http://www.tech-faq.com/certificate-authority.html" rel="nofollow" target="_blank">TopBits.com: Certificate Authority</a> <a href="http://www.bestinternetsecurity.net/172/public-key-infrastructure-and-certificate-authority.html" rel="nofollow" target="_blank">Best Internet Security: Public Key Infrastructure, Certificate Authority and Its Role in PKI</a>

Public Key Authority Vs. Certificate Authority

Certificate Authorities provide an additional layer of security over Public Key Authorities.Fotolia.com"> Public Key Authorities, ...

Continue Reading>>

How to Convert SSL Certificate to Security Key File

<P>Visit SSL Shopper, an SSL converter (see Resources).</P><P>Click "Choose File" to choose the SSL certificate you want to convert to another security key file and then click "Open" to load the SSL certificate.</P><P>Click "Type of Current Certificate" and then select your current certificate type. The definitions for each security key file are on the converter page if you are not sure what type of certificate you have or want to convert your SSL certificate to.</P><P>Click "Type to Convert to" and then select a security key file.</P><P>Click "Convert Certificate" to initiate conversion of your SSL certificate.</P>

How to Convert SSL Certificate to Security Key File

Visit SSL Shopper, an SSL converter (see Resources). Click "Choose File" to choose the SSL certificate you want to convert to ano...

Continue Reading>>

How to Set Up ISA and SSL Client Certificate Authentication

<P>Click "Start" > "Run" and enter "MMC." Click "OK." Add the certificates snap-in.</P><P>Click "Service Account" > "Local Computer" > "Microsoft Web Proxy Service."</P><P>Click "Finish" > "OK."</P><P>Install or import the certificate that will be used with the ISA server.</P><P>Close the "Certificates MMC" snap-in. Launch the ISA management console.</P><P>Click "Web Publishing Rule to use Certificate Authentication" and select "Properties."</P><P>Select "Use a Certificate to Authenticate to the SSL Web Server" underneath the "Bridging" tab. Click "Select." You have now set up ISA and SSL client certificate authentication.</P>

How to Set Up ISA and SSL Client Certificate Authentication

Click "Start" > "Run" and enter "MMC." Click "OK." Add the certificates snap-in. Click "Ser...

Continue Reading>>

How to Remove Client Access Server Certificate

<P>Click "Start," click "Administrative Tools" and launch "Microsoft System Center Configuration Manager 2007." If you do not have the program, download it free from the Microsoft Download Center (see Resources).</P><P>Navigate to the following location on your Configuration Manager in the left pane: "System CenterConfiguration Manager" > "Site Database" > "Site Management."</P><P>Right-click the node for your <site code> -<site code> and select "Properties" from the context menu. Contact your system administrator if you are not sure about your site codes.</P><P>Click the "Site Mode" tab.</P><P>Single-click to remove the checkmark next to "Enable CRL Checking on Clients." Click "OK" to end task.</P>

How to Remove Client Access Server Certificate

Click "Start," click "Administrative Tools" and launch "Microsoft System Center Configuration Manager 2007." ...

Continue Reading>>

How to Read a Server Certificate

<P>Logon to the Windows Server using an account with administrative rights.</P><P>Run the IIS management tool, found under "Programs," "Administrative Tools."</P><P>Right-click on <a class="StrongLink" href="http://www.ehow.com/internet/">the web</A> site whose certificate you want to read. From the drop-down list select "Properties."</P><P>Click the "Directory Security" tab and then click "View Certificate."</P><P>Read the certificate details, then click "Cancel" when finished.</P>

How to Read a Server Certificate

Logon to the Windows Server using an account with administrative rights. Run the IIS management tool, found under "Programs," ...

Continue Reading>>

How to Make Sure That the Published Server Name in a DNS Is Supported by the Server Certificate

<P>Navigate the website where the domain was registered. This can either be your old host or just a domain registrar website.</P><P>Read the DNS information. Each registrar and host is different, but this is normally found through a button labeled "DNS," "DNS Information" or "DNS Management."</P><P>Look at the DNS records and copy them.</P><P>Log in to your server and read the DNS information. If the information syncs up, the DNS is valid. If not, you have problems and need to contact your host and ask them to fix the error.</P>

How to Make Sure That the Published Server Name in a DNS Is Supported by the Server Certificate

Navigate the website where the domain was registered. This can either be your old host or just a domain registrar website. Read the DNS inf...

Continue Reading>>

How to Verify a Certificate From a Secure Email

<P>Download a PGP authentication program. This can take the form of a plugin for your e-mail client that can process signatures or downloading a command-line-based tool, such as PGP or GPG. All these can be found by doing a Web search.</P><P>Obtain the public key for the individual who sent you the secure e-mail. PGP's protection is based on each user creating a unique cypher for encrypting documents. In the process, two keys are created: a private key, then a public key. The public key is distributed to the world. The private key must be closely guarded by its owner. If you have downloaded a user's public key, it means you will be able to encrypt files that can only be opened by the private key's owner, and lets you verify that a signature does indeed come from that user.</P><P>Load the public key into your chosen authentication method: be it the command line or a Web browser plugin. Instructions for how exactly to do this vary from program to program, but the process for doing so can be found in your program's documentation.</P><P>Download the signature from the e-mail. If you have a plugin for your e-mail client this step is unnecessary, as the plugin will automatically verify a signature against the user's public key and display a message telling you whether it's valid. If not, take note of the directory to which you downloaded the signature, then open your command-line tool. Type in the appropriate command to verify a signature (again, it depends on your tool, but they can be found in your documentation), and the directory in which the signature is sitting. The program will then display to you whether the signature is valid or not.</P>

How to Verify a Certificate From a Secure Email

Download a PGP authentication program. This can take the form of a plugin for your e-mail client that can process signatures or downloading...

Continue Reading>>