Exam MD-102 topic 1 question 347 discussion

Create a root certification authority (CA): The root CA is the top-level certification authority that issues certificates to intermediate CAs and end-entities. Creating a root CA establishes the foundation of your PKI. Create an issuing certification authority (CA): An issuing CA is responsible for issuing certificates to end-entities (users, computers, etc.). This CA is subordinate to the root CA and ensures the separation of roles and security in your PKI. Create device configuration trusted certificate profiles: Trusted certificate profiles are used to distribute the root CA's certificate to devices, ensuring they trust certificates issued by your PKI. This step is essential for establishing a trust chain. Create device configuration PKCS certificate profiles: PKCS (Public Key Cryptography Standards) certificate profiles are used to deploy user certificates to devices. This profile will configure the devices to request and install personal user certificates.