PKI
What is PKI?
Public Key Infrastructure, a framework of policies, hardware, software, and procedures for creating, managing, distributing, and revoking digital certificates and encryption keys.
Terms that appear alongside pki
Each of these is named in at least one of the same controls as pki. The number is how many controls name both.
- nist 8 shared controls
- authentication 8 shared controls
- tls 7 shared controls
- ipsec 6 shared controls
- post quantum cryptography 5 shared controls
- zero trust 4 shared controls
- key management 4 shared controls
- iso 27001 4 shared controls
Frameworks that govern pki
What the standards actually require on pki
Requirements naming pki across 6 standards, quoted from the control text.
For PKI-based authentication, employ an organization-wide methodology for managing the content of PKI trust stores installed across all platforms, including networks, operating systems, browsers, and applications.
NIST800-IA-5(14) · IA-5(14) Authenticator Management | Managing Content of PKI Trust Stores →Standards addressing information and communication technologies should cover best practice in specifying cryptography, cryptographic methods, internet and wireless cryptography, key management with public-key cryptography, multicast and group keys, device and...
iec-62351-power-systems-communication-security::13:6 · Part 13, clause 6: ICT cryptographic techniques to be covered (specifying cryptography, methods, internet and wireless cryptography, PKI key management, group keys, device and platform integrity, secure network configuration, NSM, defence in depth, testing and validation, interoperability) →Niche equipment, for example constrained devices and large public-key infrastructure systems, must support and prefer CNSA 2.0 by 2030 and use it exclusively by 2033.
nsa-guidance-for-transition-to-quantum-resistant-cryptography::T-NICHE · T-NICHE Niche equipment such as constrained devices and large PKI systems: support and prefer by 2030, exclusive use by 2033 →Where PKI is used, the control system shall be able either to run a PKI in line with commonly accepted best practice or to obtain its public key certificates from a PKI that already exists. It applies from SL 2.
iec-62443::SR 1.8 · Public key infrastructure (PKI) certificates →Generates and logs certificates issued by the enterprise to resources, subjects, services, and applications.
SP800-207-SUP-PKI · Enterprise Public Key Infrastructure (PKI) →For RSA keys held in internet X.509 Public Key Infrastructure certificates, agencies must use a modulus no smaller than 2048 bits.
new-zealand-information-security-manual-nzism::17.2.25.C.01 · 17.2.25.C.01 RSA keys in X.509 PKI certificates of 2048 bits or more →Questions people ask about pki
What is PKI?
Why is PKI important for compliance?
Which compliance frameworks address PKI?
Where can I learn more about PKI?
See how PKI applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.