Overview of the PKI Design Process (Best Practices for Implementing a Microsoft Windows Server 2003 Public Key Infrastructure)

Applies To: Windows Server 2003 with SP1

Designing a PKI involves the following steps which may or may not be performed in this order:

• Outline the business scenario

• Define the application certificate requirements

• Create certificate policies and practices statements

• Design the certification authority (CA) infrastructure

• Create a certificate renewal strategy

• Develop a CA management plan