Certificates, both for user and computer authentication/authorization, are becoming ubiquitous. As such, if you are planning to install or upgrade your Public Key Infrastructure (PKI), you normally look for guidance. Finding Best Practice for PKI isn’t as easy as it seems, and the majority of planners would like a credible source to quote in their documentation. This morning I found a blog post on Microsoft’s Ask PFE site that is well worth reading. Use it as a guide and dig around your own organization’s documentation to confirm that your proposal matches the company’s operating procedures.
get IT right