What is PKI?

PKI stands for Public Key Infrastructure. With this system, digital certificates can be generated, distributed and even verified. They serve as a kind of digital identity for machines and people and are therefore used to secure electronic communication. They are based on the principle of asymmetric encryption. Asymmetric encryption does not consist of just one key pair. It consists of two keys, a public and a private key. This is why the process is also known as the public key process. Signing messages ensures that the message originates from the sender in its original form. This requires the sender’s public key, which is encrypted by a trustworthy authority. This allows a hierarchy to be established, but you must be able to rely on the authenticity of the highest institution. What are the components?

Digital certificates

• Serve as proof of authenticity

Certification body

• An organization that provides the CA certificate and signs the certificate requests.

Registration office

• An organization to which people can apply for certificates, which checks them and approves the applications

Certificate revocation list

• Certificates that are withdrawn before the expiry date are noted on this list.

Directory service

• Issued certificates are stored on a searchable directory, usually an LDAP server