PKI Uncovered: Certificate-Based Security Solutions for Next-Generation Networks [Pehme köide]

-Plan the foundations of an effective PKI system

-Implement processes for certificate enrollment, expiration, renewal, verification, and enforcement

-Troubleshoot key generation, enrollment, and certificate verification issues

-Master PKI design, from the basics to complex enterprise hierarchies

-Implement large-scale, site-to-site VPN solutions that integrate PKI with GET-VPN or DMVPN

-Secure remote access with ASA-based IPsec and SSL VPNs, and Cisco VPN clients

-Deploy 802.1x certificates to control access at the switchport level

-Use certificates to manage identity for VolP and call management systems

-Integrate 802.1x. DMVPN, and PKI architecture to implement cohesive virtual office security

-Use Cisco Security Manager with PKI-based systems

-Migrate to PKI from IKE pre-shared keys

In response to growing needs for flexible, scalable, and secure authentication, thousands of organizations are implementing PKI-based identity management. In PKI Uncovered, three leading Cisco security experts bring together all the knowledge and techniques you need to successfully plan, design, deploy, operate, and troubleshoot PKI in your environment.

The authors share best practices and experiences drawn from their extensive experience helping Cisco customers deploy PKI in organizations with widely varying requirements.

They begin by introducing the foundational concepts of PKI and modern cryptography. Next they walk through high-level PKI design considerations, helping you make the best choices for your organization. They introduce several PKI design modules and show how to integrate these modules into comprehensive security solutions.

PKI Uncovered offers specific, detailed guidance on using PKI with Cisco router-based DMVPN, ASA, 802.1X, and Cisco GET VPN, as well as extensive troubleshooting assistance and two end-to-end case studies.