80 likes | 217 Views
The Distribution Online Vending Pilot Project Demo Testing Certificate Management. Kennedy P Subramoney 23 July 2004. Online Vending PKI. Certificate Authority Server. A Certificate Authority Server will be setup. The CA server will:
E N D
The Distribution Online Vending Pilot ProjectDemo Testing Certificate Management Kennedy P Subramoney 23 July 2004
Certificate Authority Server • A Certificate Authority Server will be setup. • The CA server will: • Process certificate signing requests (CSR) from vending clients and vending servers. • It will sign, generate and distribute requested certificates.
Vending Server • Generates a certificate signing request (CSR). • Securely stores private key in HSM. • Load CA certificate. • Load Vending Client certificate.
Vending Client • Generates a certificate signing request (CSR). • Securely stores private key in Smart Card. • Load CA certificate. • Load Vending Server Certificate.
Vending Server Enrollment Process • The vending server would generate a CSR and securely store the private key on HSM. • The CSR would be forwarded to the Certificate Authority(CA). • The CA would then generate the certificate and make it available to Vending Clients.
Vending Client Enrollment Process • The vending client would generate a CSR and securely store the private key on smart card. • The CSR would be forwarded to the Certificate Authority(CA). • The CA would then generate the certificate and make it available to the Vending Server.
Note: • This a process specified only to test the SSL technology implementation. • It does not attempt to implement a secure PKI.