<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:51" />
    <title>Information About Certificate Authorities and Digital  Certificates </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1619;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1090578"> </a><h1 class="pTitle">
Information About Certificate Authorities and Digital 
Certificates

</h1>
<a name="wp1072724"> </a><p class="pBody">
Public Key Infrastructure (PKI) support provides the means for the Cisco MDS 9000 Family switches to 
obtain and use digital certificates for secure communication in the network. PKI support provides 
manageability and scalability for IPsec/IKE and SSH.

</p>
<a name="wp1072725"> </a><p class="pBody">
Certificate Authorities (CAs) manage certificate requests and issue certificates to participating entities 
such as hosts, network devices, or users. The CAs provide centralized key management for the 
participating entities.

</p>
<a name="wp1072687"> </a><p class="pBody">
Digital signatures, based on public key cryptography, digitally authenticate devices and individual users. 
In public key cryptography, such as the RSA encryption system, each device or user has a key-pair 
containing both a private key and a public key. The private key is kept secret and is known only to the 
owning device or user only. However, the public key is known to everybody. The keys act as 
complements. Anything encrypted with one of the keys can be decrypted with the other. A signature is 
formed when data is encrypted with a sender’s private key. The receiver verifies the signature by 
decrypting the message with the sender’s public key. This process relies on the receiver having a copy 
of the sender’s public key and knowing with a high degree of certainty that it really does belong to the 
sender and not to someone pretending to be the sender.

</p>
<a name="wp1072743"> </a><p class="pBody">
This section includes the following topics:

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1072747"> </a><li class="pSmartList1"><a href="digicert03.html">Purpose of CAs and Digital Certificates</a>
</li>
<a name="wp1072751"> </a><li class="pSmartList1"><a href="digicert04.html">Trust Model, Trust Points, and Identity CAs</a>
</li>
<a name="wp1072755"> </a><li class="pSmartList1"><a href="digicert05.html">RSA Key-Pairs and Identity Certificates</a>
</li>
<a name="wp1072759"> </a><li class="pSmartList1"><a href="digicert06.html">Multiple Trusted CA Support</a>
</li>
<a name="wp1072763"> </a><li class="pSmartList1"><a href="digicert07.html">PKI Enrollment Support</a>
</li>
<a name="wp1072767"> </a><li class="pSmartList1"><a href="digicert08.html">Manual Enrollment Using Cut-and-Paste Method</a>
</li>
<a name="wp1072771"> </a><li class="pSmartList1"><a href="digicert09.html">Multiple RSA Key-Pair and Identity CA Support</a>
</li>
<a name="wp1072775"> </a><li class="pSmartList1"><a href="digicert10.html">Peer Certificate Verification</a>
</li>
<a name="wp1072779"> </a><li class="pSmartList1"><a href="digicert11.html">CRL Downloading, Caching, and Checking Support</a>
</li>
<a name="wp1072783"> </a><li class="pSmartList1"><a href="digicert12.html">OCSP Support</a>
</li>
<a name="wp1072787"> </a><li class="pSmartList1"><a href="digicert13.html">Import and Export Support for Certificates and Associated Key-Pairs</a>
</li>
</ul></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
