22
Active Directory and PKI solutions for secure business Dr. Vilius Benetis UAB BAIP 2011 05 24 Microsoft direktorija ir viešo rakto sprendimai saugiai veiklai

Active Directory and PKI solutions for secure business

Embed Size (px)

Citation preview

Page 1: Active Directory and PKI solutions for secure business

Active Directory and PKI solutions for secure

business

Dr. Vilius Benetis

UAB BAIP

2011 05 24

Microsoft direktorija ir viešo rakto sprendimai

saugiai veiklai

Page 2: Active Directory and PKI solutions for secure business

Išsinešimui

• Įmonės IT infrastruktūros sauga remiasi

PKI

• Jūs jau turite nusipirkę PKI

• Kai mokėjote už Active Directory (*)

• Sukonfigūruokite adekvatų saugumą!

Page 3: Active Directory and PKI solutions for secure business

Turinys

• Sauga = PKI + ..

• Pagal nutylėjimą = “pašto dėžutės spynos”

• Išnaudokite normãliai

Page 4: Active Directory and PKI solutions for secure business

Sauga

CC-gluemoon

Page 6: Active Directory and PKI solutions for secure business
Page 7: Active Directory and PKI solutions for secure business

microsoft.com/PKI

Page 8: Active Directory and PKI solutions for secure business
Page 9: Active Directory and PKI solutions for secure business

CC kamshots

Page 10: Active Directory and PKI solutions for secure business
Page 11: Active Directory and PKI solutions for secure business
Page 12: Active Directory and PKI solutions for secure business

CC woodleywonderworks Nusipirkote butą

Page 13: Active Directory and PKI solutions for secure business
Page 14: Active Directory and PKI solutions for secure business
Page 15: Active Directory and PKI solutions for secure business
Page 16: Active Directory and PKI solutions for secure business

Lock structure for bathroom use

United States Patent 6568231

Page 17: Active Directory and PKI solutions for secure business
Page 18: Active Directory and PKI solutions for secure business
Page 19: Active Directory and PKI solutions for secure business

Panaudokite normãliai:

• Atsparumas: • HSM, offline root, Issuing/Policy CA, certificate

policy, OCSP

• Panaudojimas • IEEE 802.1x

• SSL/TLS – web servisai (Exchange, Lynx, SCCM)

• Bitlocker

• Smart Cards (2FA, SSO)

• 3čios šalies PĮ komunikavimo apsauga

• Į išorę: B-B, B-C paslaugos

Page 20: Active Directory and PKI solutions for secure business

© San Diego Locksmith

Page 21: Active Directory and PKI solutions for secure business

Sauga

CC-jon smith una nos lucror

• Įmonės IT infra sauga remiasi PKI

• Jūs jau turite nusipirkę PKI

• Kai mokėjote už Active Directory (*)

• Sukonfigūruokite adekvatų saugumą!

Page 22: Active Directory and PKI solutions for secure business

Ačiū