Validate the server in order to prevent a validate the certificate of the identity of the malicious server from root CA and any intermediate web server. masquerading. CAs. Manage Used to decrypt and inspect Certificate on the ISA server. encrypted traffic, then pass it to the web CA chain must be accessible HTTPS traffic server using HTTP. from all potential web clients. using ISA server Used to decrypt and inspect Certificate on the ISA server. and web traffic, then re-encrypt and pass publishing. Certificate on the web server. it to the web server using CA chain must be accessible HTTPS/SSL. from all potential web clients. Authenticate the Prove the identity of the client Certificate on all potential SSL client. when it connects to the web web clients. Private key on server. The use of this the web client and public key certificate is optional in SSL. available to the web servers. Code and Prove the identity of the Certificate at the point of code document distributor of that code or or document signature. signing. document, and prove that the All potential recipients must code or document has not been have access to the chain up changed since it was signed. to the root CA. System Center With Configuration Manager, a Certificate on the site server Configuration site can be configured in native and on all clients, to verify Manager 2007, mode in order to secure downloaded policies. running in native communication between the Web server certificates on the mode. site server, site roles, and the following site system roles, clients. for SSL communications: Management point Proxy management point Distribution point Software update migration point Client authentication certificates on all Configuration Manager clients Encrypting File EFS is a Windows encryption Certificate on the encrypting System (EFS) technology used to store machine. encrypted files on NTFS file Certificate on the decrypting system volumes. Encrypted machine. files cannot be used unless the Recovery key on a domain user has access to the keys controller. required to decrypt the information. Virtual Private L2TP and SSTP VPNs If PPTP VPN uses EAP-TLS Networks can use certificates to encrypt for authentication, a (VPNs) traffic that is sent through the certificate is required on each VPN connection. VPN server. CA chain must
Validate the identity of the web server. server in order to prevent a malicious server from masquerading. validate the certificate of the root CA and any intermediate CAs. Manage encrypted HTTPS traffic using ISA server and web publishing. Used to decrypt and inspect traffic, then pass it to the web server using HTTP. Certificate on the ISA server. CA chain must be accessible from all potential web clients. Used to decrypt and inspect traffic, then re-encrypt and pass it to the web server using HTTPS/SSL. Certificate on the ISA server. Certificate on the web server. CA chain must be accessible from all potential web clients. Authenticate the SSL client. Prove the identity of the client when it connects to the web server. The use of this certificate is optional in SSL. Certificate on all potential web clients. Private key on the web client and public key available to the web servers. Code and document signing. Prove the identity of the distributor of that code or document, and prove that the code or document has not been changed since it was signed. Certificate at the point of code or document signature. All potential recipients must have access to the chain up to the root CA. System Center Configuration Manager 2007, running in native mode. With Configuration Manager, a site can be configured in native mode in order to secure communication between the site server, site roles, and the clients. Certificate on the site server and on all clients, to verify downloaded policies. Web server certificates on the following site system roles, for SSL communications: Management point Proxy management point Distribution point Software update migration point Client authentication certificates on all Configuration Manager clients Encrypting File System (EFS) EFS is a Windows encryption technology used to store encrypted files on NTFS file system volumes. Encrypted files cannot be used unless the user has access to the keys required to decrypt the information. Certificate on the encrypting machine. Certificate on the decrypting machine. Recovery key on a domain controller. Virtual Private Networks (VPNs) L2TP and SSTP VPNs can use certificates to encrypt traffic that is sent through the VPN connection. If PPTP VPN uses EAP-TLS for authentication, a certificate is required on each VPN server. CA chain must
IPD%20-%20Active%20Directory%20Certificate%20Services%20version%201.1.docx