Securing Public Key Infrastructure Whitepaper is Released!

Here’s a great new PKI whitepaper from Microsoft I contributed to prior to my departure. It hasn’t been widely publicized or distributed yet, but you can get it direct from Microsoft. Entitled “Securing Public Key Infrastructure” it is the most up to date set of best practices from Microsoft in years!

Topics include:

Planning a CA Hierarchy

Physical Controls for Securing PKI

PKI Process Security

Technical Controls

Planning Certificate Algorithms and Usages

Protecting CA Keys and Critical Artifacts

Monitoring

Compromise Response