A certificate is a small file that contains several pieces of information about its owner.
This data can include the owner's EMAIL ADDRESS THE OWNER'S NAME THE CERTIFICATE usage type the validity
period and the URLs for authority information access or AAA and certificate revocation list distribution
point or CBP locations.
A certificate also contains the key pair which is the private key and it's related public key.
These keys are used in processes of validating identities digital signature sound encryption the key
pair that each certificate generates works under the following conditions.
When content is encrypted with a public key it can be decrypted only with the private key when content
is encrypted with a private key.
It can be decrypted only with a public key no other key is involved in the relationship between the
keys from the from a single key player and the private key can not be derived in a reasonable amount
of time from a public key and twice a year.
During the enrollment process the client generates the private key while the CEA generates a corresponding
public key certificates provide a mechanism for gaining confidence in the relationship between a public
key and the entity that owns the corresponding private key.
You can think of a certificate as being similar to a driver driver's license.
Many businesses accept a drivers license as a form of identification because the community accepts the
license issuer a government institution as trustworthy.
Because businesses understand the process by which someone can obtain a driver's license.
They trust the issuer of verified the identity of the individual before issuing the license.
Therefore the driver's license is acceptable as well it form of identification a certificate.
Trust is established in a similar way.
Now some words about certificate templates certificate templates allow administrators to customize the
distribution method of certificates defined certificate purposes and mandate the type of usage that
a certificate allows.
Administrators can create templates and then can deploy them quickly to an enterprise by using built
in graphical user interface or common client management tools associated with this certificate template
is its description discretionary the excess Control List the decal defines which security principles
have permissions to read and configure their template and what security principles can rule or use auto
enrolment for certificates based on the template certificate templates and their permissions are defiant
in 80 US and are well it within the forest.
If more than one enterprise is running in the 80 days as forest permission changes will affect all sales.
When you define a certificate template the definition of the certificate template must be available
to all cities in the forest.
You accomplish this when you store the certificate template information in the configuration name and
context of a deed is the application of this information depends on the ADF application schedule and
the certificate template might not be available to all seize until the application completes.
Storage and replication occured automatically okay.
Next up you'll be talking about certificate template versions and Windows Server 2016.