Busy. Please wait.

show password
Forgot Password?

Don't have an account?  Sign up 

Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account.
We do not share your email address with others. It is only used to allow you to reset your password. For details read our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.

Remove Ads
Don't know
remaining cards
To flip the current card, click it or press the Spacebar key.  To move the current card to one of the three colored boxes, click on the box.  You may also press the UP ARROW key to move the card to the "Know" box, the DOWN ARROW key to move the card to the "Don't know" box, or the RIGHT ARROW key to move the card to the Remaining box.  You may also click on the card displayed in any of the three boxes to bring that card back to the center.

Pass complete!

"Know" box contains:
Time elapsed:
restart all cards

Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

CIT233 Ch 9

CIT233 Win Ent Services - Chapter 9 Certificate Services

certificate practice statement (CPS) A document describing how a CA issues certificates containing the CA identity, security practices used to maintain CA integrity, types of certificates issued, the renewal policy, and so forth.
certificate revocation list (CRL) A list of certificates that the CA administrator has invalidated before their expiration dates.
certificate templates
CRL distribution point (CDP) An attribute of a certificate that identifies where the CRL for a CA can be retrieved; can include URLs for HTTP, FILE, FTP, and LDAP locations. See also certificate revocation list (CRL).
enterprise CA A server running Windows Server 2012/R2 with the AD CS role installed; integrates with Active Directory.
hash algorithm A mathematical function that takes a string of data as input and produces a fixed-size value as output. Hash values are used to verify that the original data hasn’t been changed and to sign CA certificates and certificates issued by the CA.
intermediate CAs A CA in a multilevel CA hierarchy that issue certificates to issuing CAs, which respond to user and device certificate requests; sometimes called a “policy CA.”
issuing CAs A CA that interacts with clients to field certificate requests and maintain the CRL. See also certificate revocation list (CRL).
key archival A method of backing up private keys and restoring them if users’ private keys are lost.
Network Device Enrollment Service (NDES) A service that allows network devices, such as routers and switches, to get certificates by using Simple Certificate Enrollment Protocol (SCEP), a Cisco proprietary protocol.
online responder (OR) A role service that enables clients to check a certificate’s revocation status without having to download the CRL. See also certificate revocation list (CRL).
public key infrastructure (PKI) A security system that binds a user’s or device’s identity to a cryptographic key that secures data transfers with encryption and ensures data authenticity with digital certificates.
registration authority A server configured with the Web Enrollment role service; also called a “CA Web proxy.”
restricted enrollment agent An enrollment agent that’s limited to enrolling only specific users or security groups; available only with an enterprise CA.
root CA The first CA installed in a network. Clients are configured to trust the root CA’s certificate, and then implicitly trust the certificate of any CA that’s subordinate to the root.
stand-alone CA A server running Windows Server 2012/R2 with the AD CS role installed; not integrated with Active Directory.
Created by: Leisac