Certificate lifecycle management

- [Instructor] Unfortunately, PKI certificates…do not last forever.…They have a specified lifetime.…In this section,…we're going to talk about the certificate lifecycle.…But first, we have to come up with a way…to manage certificates during that lifecycle.…And this is definitely something that's very crucial…for larger enterprises, where we might have thousands…of certificates that are issued.…We also have to consider compliance…with laws or regulations.…For example, we might have…to store private keys in a password protected file.…

So, if we have a centralized management strategy,…we would have a central tool that,…for example, mobile devices periodically report to…to receive instructions about PKI certificate issuance…and so on.…Or we might go with a decentralized strategy,…where we manually deal with certificate issuance…and revocation one-by-one, on an as-needed basis.…Either way, we need a plan B…when there are security breaches.…We should plan for rapid certificate replacement.…

You might remember, back in 2014 or so,…