Enterprise Certificate Authority

Full Title or Meme

Any Certificate Authority that is designed to apply to people, natural or otherwise, that are known to the Enterprise.

Context

• Typically, an Enterprise Certificate Authority operates via Client Certificates that are issued to a digital Identifier that is issued to an Entity that has some means to control access to a protected Private Key that is used for Authentication.
• The most common form of Authentication is via Client Certificates that bind the Entity Identifier with a Client Certificate that is used in a TCP connection using Mutual Authentication to carry the proof of possession, not only of the key of the server, but also of the key of the Client.
• The most common form of Mutual Authentication uses MTLS or mutual transportation layer security.

Problems

There have been multiple vulnerabilities reported to the US Government the top three in 2022 are for Microsoft AD.

• CVE-2022-34691
• CVE-2022-26931
• CVE-2022-26923

Solutions

• Active Directory Certificate Services: Enterprise CA Architecture