100 lines
7.9 KiB
HTML
100 lines
7.9 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="DCM concepts" />
|
||
|
|
<meta name="abstract" content="View this information to better understand what digital certificates are and how they work. Learn about the different types of certificates and how you can use them as part of your security policy." />
|
||
|
|
<meta name="description" content="View this information to better understand what digital certificates are and how they work. Learn about the different types of certificates and how you can use them as part of your security policy." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurazhudigitalcertmngmnt.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahucertextensions.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahucertrenewal.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahudistname.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahudigsig.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahukeypair.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurzahu02mcertificateauthority.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurzahucertrevlist.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurzahu1nmcertstore.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurzahu0cmcryptogco.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahucryptocardconcept.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurzahu0gmssldefco.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahuappdefconcept.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahuvalidation_concept.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzahu4ab_understand_dc" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>DCM concepts</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzahu4ab_understand_dc"><a name="rzahu4ab_understand_dc"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">DCM concepts</h1>
|
||
|
|
<div><p>View this information to better understand what digital certificates
|
||
|
|
are and how they work. Learn about the different types of certificates and
|
||
|
|
how you can use them as part of your security policy. </p>
|
||
|
|
<p>Before you start using digital certificates to enhance your system and
|
||
|
|
network security policy, you need to understand what they are and what security
|
||
|
|
benefits they provide. </p>
|
||
|
|
<p>A digital certificate is a digital credential that validates the identity
|
||
|
|
of the certificate's owner, much as a passport does. The identification information
|
||
|
|
that a digital certificate provides is known as the subject distinguished
|
||
|
|
name. A trusted party, called a Certificate Authority (CA), issues digital
|
||
|
|
certificates to users or to organizations. The trust in the CA is the foundation
|
||
|
|
of trust in the certificate as a valid credential. </p>
|
||
|
|
<p>A digital certificate also contains a public key which is part of a public-private
|
||
|
|
key pair. A variety of security functions rely on the use of digital certificates
|
||
|
|
and their associated key pairs. You can use digital certificates to configure
|
||
|
|
Secure Sockets Layer (SSL) sessions to ensure private, secure communication
|
||
|
|
sessions between users and your server applications. You can extend this security
|
||
|
|
by configuring many SSL-enabled applications to require certificates instead
|
||
|
|
of user names and passwords for more secure user authentication. </p>
|
||
|
|
<p>To learn more about digital certificate concepts, review these topics: </p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<ul class="ullinks">
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahucertextensions.htm">Certificate extensions</a></strong><br />
|
||
|
|
Certificate extensions are information fields that provide additional information about the certificate.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahucertrenewal.htm">Certificate renewal</a></strong><br />
|
||
|
|
The certificate renewal process that Digital Certificate Manager (DCM) uses varies based on the type of Certificate Authority (CA) that issued the certificate.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahudistname.htm">Distinguished name</a></strong><br />
|
||
|
|
Use this information to learn about the identification characteristics of digital certificates.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahudigsig.htm">Digital signatures</a></strong><br />
|
||
|
|
A digital signature on an electronic document or other object is created by using a form of cryptography and is equivalent to a personal signature on a written document.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahukeypair.htm">Public-private key pair</a></strong><br />
|
||
|
|
Every digital certificate has a pair of associated cryptographic keys that consist of a private key and a public key.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahurzahu02mcertificateauthority.htm">Certificate Authority (CA)</a></strong><br />
|
||
|
|
A Certificate Authority (CA) is a trusted central administrative entity that can issue digital certificates to users and servers.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahurzahucertrevlist.htm">Certificate Revocation List (CRL) Locations</a></strong><br />
|
||
|
|
A Certificate Revocation List (CRL) is a file that lists all invalid and revoked certificates for a specific Certificate Authority (CA).</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahurzahu1nmcertstore.htm">Certificate stores</a></strong><br />
|
||
|
|
A certificate store is a special key database file that Digital Certificate Manager (DCM) uses to store digital certificates.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahurzahu0cmcryptogco.htm">Cryptography</a></strong><br />
|
||
|
|
Use this information to learn what cryptography is and how digital certificates use cryptographic functions to provide security.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahucryptocardconcept.htm">IBM Cryptographic Coprocessors for iSeries</a></strong><br />
|
||
|
|
The cryptographic coprocessor provides proven cryptographic services, ensuring privacy and integrity, for developing secure e-business applications.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahurzahu0gmssldefco.htm">Secure Sockets Layer (SSL)</a></strong><br />
|
||
|
|
The Secure Sockets Layer (SSL), originally created by Netscape, is the industry standard for session encryption between clients and servers.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahuappdefconcept.htm">Application definitions</a></strong><br />
|
||
|
|
Use this information to learn what DCM application definitions are and how to work with them for SSL configuration and object signing.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahuvalidation_concept.htm">Validation</a></strong><br />
|
||
|
|
Digital Certificate Manager (DCM) provides tasks that allow you to validate a certificate or to validate an application to verify various properties that they each must have.</li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzahurazhudigitalcertmngmnt.htm">Digital Certificate Manager</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|