How Certificates are Used in Active Directory Certificate Services.
There are four assurances that you get by implementing
Active Directory Certificate Services.
The first one is integrity. That message that is
sent to you cannot be intercepted.
It is virtually impossible to intercept that because as soon as you take
a message in route from one place to another place,
you have spoiled the hash and it is not going to work out anymore.
The second one is confidentiality, knowing that nobody can see
that message being sent, it's for your eyes only if it's sent
to you, and if you send a message,
you can be assured that it is for the recipient's eyes only.
Nobody else is going to look at it.
Nonrepudiation.
What this means is if somebody has digitally signed a document or a network has
digitally signed a message that it's sending back and forth,
they cannot repudiate it.
They cannot say, well, you know, I didn't send that, somebody else sent it.
They proved that they have ownership of that private key simply
by the fact that they digitally signed it.
So they can't repudiate or claim that they actually sent the message.
And then authenticity, knowing that that message is authentic,
that that is the original message that was sent by the person
who claims that they actually sent it. Here is a
noncomprehensive list of the different entities that you will
be certifying with this tool, a person, a device,
a message,
the actual channel the message goes through, data that is very
important and confidential, and finally,
a digital wallet that we actually use quite a bit. Common uses are
things that you will certify, a network card,
a video meeting, they're very popular these days, your employees, a
document, the entire smartphone that your users have, and the
entire network in which you operate in.
So those are the benefits of Active Directory Certificate Services
that you can assure that you have a much more secure,
much more confidential, much more safe network for your enterprise to operate in.
And I hope this module gave you an idea of the PKI environment,
how it is used, and the specific implementation that
Microsoft has with the Microsoft Windows Server 2022 Active
Directory Certificate Services. Up next, we're going to actually install our root CA.