Public Key Infrastructure (PKI)
What is Public Key Infrastructure (PKI)?
A set of roles, policies, hardware, software, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. PKI provides the framework for trusted electronic communications.
Terms that appear alongside public key infrastructure (pki)
Each of these is named in at least one of the same controls as public key infrastructure (pki). The number is how many controls name both.
- pki 4 shared controls
- post quantum cryptography 3 shared controls
- nist 3 shared controls
- ipsec 2 shared controls
- tls 2 shared controls
- nist sp 800 53 2 shared controls
- fips 2 shared controls
Frameworks that govern public key infrastructure (pki)
What the standards actually require on public key infrastructure (pki)
Requirements naming public key infrastructure (pki) across 6 standards, quoted from the control text.
Where PKI is used, the control system shall be able either to run a PKI in line with commonly accepted best practice or to obtain its public key certificates from a PKI that already exists. It applies from SL 2.
iec-62443::SR 1.8 · Public key infrastructure (PKI) certificates →Generates and logs certificates issued by the enterprise to resources, subjects, services, and applications.
SP800-207-SUP-PKI · Enterprise Public Key Infrastructure (PKI) →Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication confirms that each party to a communication (for example a person, device, service or application) really is who it claims to be, and gives assurance that no party is impersonating anothe...
X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →Kuwait NCF Protect function (Data). Data Protection and Encryption aligned with NIST SP 800-53 SC family + ISO 27001 A.10 cryptography + A.13 communications security + KDPPR CITRA data protection coordination.
KNCF-Protect-Data-Encryption-Classification-Cryptography-Key-Management-DLP-PKI-Quantum-Resistant · Kuwait NCF Protect + Data + Encryption + Classification + Cryptography + Key Management + DLP →(a) For public key-based authentication: (1) Enforce authorized access to the corresponding private key; and (2) Map the authenticated identity to the account of the individual or group;
NIST800-IA-5(2) · IA-5(2) Authenticator Management | Public Key-based Authentication →(a) For public key-based authentication: (1) Enforce authorized access to the corresponding private key; and (2) Map the authenticated identity to the account of the individual or group;
nist-sp-800-53-revision-5-1-high::IA-5(2) · IA-5(2) Authenticator Management | Public Key-based Authentication →Questions people ask about public key infrastructure (pki)
What is Public Key Infrastructure (PKI)?
Why is Public Key Infrastructure (PKI) important for compliance?
Which compliance frameworks address Public Key Infrastructure (PKI)?
Where can I learn more about Public Key Infrastructure (PKI)?
See how Public Key Infrastructure (PKI) applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.