Certificate Management for Cloud Computing

---

• certificates are used to identify both individuals and computers
• rely on both a public and private key
• can be self-generated or generated by a certificate authority (CA)
• CA
  • provides a certificate repository for storage and distribution of certificates
  • supports certificate revocation lists (CRL)
• certificates follow a lifecycle
  • created, managed, discovered, and revoked or expired
• design certificate management policies securely
  • store private keys for certificates securely
  • revocation processes should be well understood
  • plan for lifecycle processes