it lets you issue your own certificates, which you then use for different reasons, including:
-stricter authentification & secure comms between pcs on your lan/wan
-digitally signing e-mail to guarantee authenticity of the sender
-as with all PKI systems (pki = public key infrastructure: 1 private key you keep safe, used to encrypt & 1 public key you distribute which is linked to your private key and so the only one that can decrypt what you encrypt with the private key), you distribute your public key only to those you choose.
certificates contain extra information, but are also essentially a key-holder...
an off the rack and FAAAAAAR from complete explanation of CA...
reread technet, search on google for Enterprise Certificate Autority Windows 2003 and you'll end up finding detailed, accurate info on what, how and why.....
good luck
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.