Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a question related to PKI Infrastructure: should an organization go with Microsoft PKI or an independent separate PKI Infrastructure? Is there any licensing restrictions if I use Microsoft PKI Infrastructure? Or should I get an independent PKI infrastructure from a vendor that offers PKI TSA and SP (Signature Proof) Infrastructure?

share|improve this question

Very hard choice and it depends on your requirements.

I am a fan of the Microsoft PKI stack, it is very easy to use and manage. That aside, if I am doing anything related to Active Directory / per user certificates etc, the Microsoft PKI is the best on the market, as you expect, it integrates well and seamless. I love it!

There are alternatives out there, but unless you are willing to pay for support or know it very well, I would stay clear - at the end of the day, the Microsoft CA stuff does everything I could need.

As for licensing, I always assumed it was free with a valid Windows (server) licence in the same way as DHCP or DNS server can be used to service/manage as many clients as you need.

share|improve this answer
Is the microsoft PKI certificate a standards based certificate – abmv May 19 '10 at 11:48
Also does the solution have Signature Proof services etc ? and CAL management and workflows etc? – abmv May 19 '10 at 11:52
@abmv - it can be scripted and integrated in to your workflow - as for standards, as far as I know, it uses standards as I have issued a few web certificates that are used by Windows Mobile and Firefox on Linux (after installing our root certificate to the device). – William Hilsum May 20 '10 at 0:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .