Tying Different PKIs Together
In some cases, more than one CA can be needed for a specific PKI to work properly, and several requirements must be met for different PKIs to intercommunicate. Here are some examples:
- A company wants to be able to communicate seamlessly with its suppliers, customers, or business partners via PKI.
- One department within a company has higher security requirements than all other departments and thus needs to configure and control its own CA.
- One department needs to have specially constructed certificates with unique fields and usages.
- Different parts of an organization want to control their own pieces of the network and the CA that is encompassed within it.
- The number of certificates that need to be generated and maintained ...