Win2k3_Chapter11_CA.docx

《Windows2003Network Operating System》Experiment GuideExperiment Project：CA ServerKeywords：CA Server Lecturer: Dong WangDate: September 2011 Location：Audience：Self-checking list for VM EnvironmentLog in to your Microsoft Windows host as the Administrator user or as a user who is a member of the Windows Administrators group;The minimum memory reserved for each guest operating system is 256MB(XP) or 384MB(2k3); At least 2GB free disk space recommended for clean XP guest operating system; At least 5GB free disk space recommended for clean 2k3 guest operating system; Make sure VM workstation installer.exe file is stored in your local disk; Take a VM snapshot while OS environment is clean and gets ready to start the experiment. Background knowledgeCertificate servers validate, or certify, keys as part of a Public key infrastructure. Keys are strings of text generated from a series of encryption algorithms that allow you to secure communication for a group of users. Many Web servers, such as Microsofts Internet Information Services (IIS) or Apaches mod_ssl create keys that after having been validated, can be applied to other servers such as News servers or Web servers. The purpose of this process is to create a way for people to communicate and be reasonably sure that others are not eavesdropping or assuming a false identity.Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. In cryptography, a PKI is an arrangement that binds public keys with respective user identities by means of a certificate authority (CA). The user identity must be unique within each CA domain. The binding is established through the registration and issuance process, which, depending on the level of assurance the binding has, may be carried out by software at a CA, or under human supervision. The PKI role that assures this binding is called the Regis