Overview of the PKI Design Process (Best Practices for Implementing a Microsoft Windows Server 2003 Public Key Infrastructure)

Applies To: Windows Server 2003 with SP1

Designing a PKI involves the following steps which may or may not be performed in this order:

  • Outline the business scenario

  • Define the application certificate requirements

  • Create certificate policies and practices statements

  • Design the certification authority (CA) infrastructure

  • Create a certificate renewal strategy

  • Develop a CA management plan