Understanding Public-Key Infrastructure: Concepts, Standards, and Deployment Considerations

Build Versus Buy

A build option implies that an organization is willing to invest in the development of PKI technology (for example, in CA and/or RA technology). A buy option simply means that an organization will purchase PKI products or services, either through in-sourcing or out-sourcing.

While there is little evidence that organizations are willing to pursue a build option, we do leave room for the possibility that an organization may want to actually build their own PKI components under certain (albeit extreme) circumstances.

However, a number of barriers should be considered before contemplating such an option:

• First, PKI technology is relatively complex to implement. Most vendors that offer PKI software have invested substantially in the ...