The private keys of the code-signing certificate can be stored in an HSM to eliminate the risks associated with stolen, corrupted, or misused keys.
PKI – CP/CPS Development
continue
"In today’s digital world, a PKI is the best way for an organization to safeguard its sensitive data from unauthorized parties. Encryption serves as a lock and key to protect information from access by bad actors."
Encryption Consulting helps customers develop comprehensive PKI-related policy documents which include Certificate Policy (CP) documents, Certification Practice Statement (CPS) documents, and associated security policies based on RFC 3647.
Encryption Consulting (EC) will work collaboratively with customer stakeholders to develop a Certificate Policy (CP) / Certificate Practice Statement (CPS) document following the template provided in Request for Comment (RFC) #3647
During this activity, the Encryption Consulting’s team will:
- Prepare a CPS document template in accordance with RFC #3647
- Assist customer in development the draft of CP/CPS content
- Identify additional operations practices needed for inclusion in the CP/CPS
- Review final draft CP/CPS with Key stakeholders
Certificate Policy (CP)
- A document that sets out the rights, duties, and obligations of each party in a Public Key Infrastructure
- The Certificate Policy (CP) is a document which usually has legal effect
- A CP is usually publicly exposed by CAs, for example on a Web Site (VeriSign, etc.)
Certificate Practice Statement (CPS)
- A document that sets out what happens in practice to support the policy statements made in the CP in a PKI
- The Certificate Practice Statement (CPS) is the document which may have legal effect in limited circumstances
Trusted by
Previous
Next
Case Study
See how Encryption Consulting assisted a Retail institution in implementing a new PKI.
"Encryption Consulting developed a PKI strategy for our organization which helped us remediate our current PKI environment in critical areas such as PKI Operations, Certificate Lifecycle Management, and Design & Architecture."
CISO, Financial Institution
Blog
PKI OPERATIONS
PKI Operations refer to the capability of the organization to Deploy, Sustain and Expand PKI services.
Report
nCIPHERS Global PKI and IoT Trends
According to the findings, the rapid growth in the use of IoT devices1 is having an impact on the use of PKI technologies
Download Report
Know more