Digital certificates may be used as an authentication factor, providing a digital version of a “something you have” factor. In this video, learn how digital certificates are used for SSH connections, with smart cards, and for network access.
- [Instructor] Digital certificates may be used…for authentication.…Among other uses,…they may be used to connect to servers by SSH,…to power smart cards,…and for restricting network access to specific devices.…When you use digital certificates for authentication,…you create a digital certificate…similar to the one used to secure websites.…The certificate's purpose is to provide a trusted copy…of a public key to third parties.…You retain the corresponding private key…to prove that you are the owner of the public key…in the certificate.…
Before we dive into certificates,…let's talk about how we can use keys for authentication.…I'll describe the process and then show it to you in action…with an SSH connection.…When you want to use keys for encryption,…you first create a public-private key pair.…You retain the private key a secret knowledge…and then share the public key…with a server you wish to authenticate to.…When you attempt to log in to a server…using key-based encryption,…the server generates a random message and sends it to you.…
You can sign up for Mike's free study group at certmike.com, and find his study guides at the Sybex test prep site. To review the complete CISSP Body of Knowledge, visit https://www.isc2.org/cissp-domains/default.aspx.
Note: This course is part of a series releasing throughout 2018. A complete learning path will be available once all the courses are released.
- Identity and access management overview
- Identification mechanisms: user names, access cards, biometrics, and registration
- Authentication factors
- Password authentication protocols
- Identity as a service (IDaaS)
- Enforcing accountability
- Managing credentials with policies
- Using access control lists
- Defending against access control attacks
Skill Level Advanced
1. Identity and Access Management
5. Credential Management
7. Access Control Attacks
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.