thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Public Key Infrastructure (PKI)

Framework of CAs, policies, and technology for issuing, managing, and revoking digital certificates.

Definition

PKI binds public keys to identities through certificates signed by trusted certificate authorities. Components include root and intermediate CAs, registration authorities, certificate repositories, revocation services (CRL and OCSP), and certificate policies. PKI enables TLS, S/MIME, code signing, smart card logon, and 802.1X EAP-TLS.

Example

An enterprise uses Active Directory Certificate Services to issue certificates to every laptop for Wi-Fi EAP-TLS.

Exam tip

PKI questions often ask which component validates identity (RA), signs certificates (CA), or reports revocation (CRL/OCSP).

Related terms