ABSTRACT

Public key infrastructure (PKI) is comprised of many components: technical infrastructure, policies, procedures, and people. Initial registration of subscribers for a PKI service has many facets, pertaining to almost every one of the PKI components. Some of the companies in the PKI business provide all services: hosting Certificate and Registration Authorities; registering subscribers; issuing, publishing, and maintaining the status of all types of certificates; and supporting a network of trust. The process of the registration of subjects, as well as a majority of the aspects of PKI, are regulated by its Certificate Policies (CP) and Certification Practice Statement. For initial registration with PKI, a subscriber usually has to go through the processes of identification and authentication. Authentication requirements in the process of registration with PKI depend on the nature of applying end entity and CP, stating the purpose of the certificate.