Public key infrastructure (PKI)

{
  "id": "MLC-T-CYB-003374",
  "term": "Public key infrastructure (PKI)",
  "field": "Cybersecurity",
  "definition": "1. A framework that is established to issue, maintain and revoke public key certificates.\n\n2. A support service to the PIV system that provides the cryptographic keys needed to perform digital signature-based identity verification and to protect communications and the storage of sensitive verification system data within identity cards and the verification system.\n\n3. A framework that is established to issue, maintain, and revoke public key certificates.\n\n4. The architecture, organization, techniques, practices, and procedures that collectively support the implementation and operation of a certificate-based public key cryptographic system. Framework established to issue, maintain, and revoke public key certificates.\n\n5. The framework and services that provide for the generation, production, distribution, control, accounting, and destruction of public key certificates. Components include the personnel, policies, processes, server platforms, software, and workstations used for the purpose of administering certificates and public-private key pairs, including the ability to issue, maintain, recover, and revoke public key certificates.\n\n6. A Framework that is established to issue, maintain, and revoke public key certificates.\n\n7. A set of policies, processes, server platforms, software and workstations used for the purpose of administering certificates and public-private key pairs, including the ability to issue, maintain, and revoke public key certificates. The PKI includes the hierarchy of certificate authorities that allow for the deployment of digital certificates that support encryption, digital signature and authentication to meet business and security requirements.\n\n8. A support service to the PIV system that provides the cryptographic keys needed to perform digital signature-based identity verification and to protect communications and storage of enterprise data.\n\n9. A framework that is established to issue, maintain, and revoke public-key certificates.\n\n10. A set of policies, processes, server platforms, software, and workstations used to administer certificates and public-private key pairs, including the ability to issue, maintain, and revoke public-key certificates.\n\n11. A set of policies, processes, server platforms, software and workstations used for the purpose of administering certificates and public-private key pairs, including the ability to issue, maintain, and revoke public key certificates.",
  "abbreviation": "PKI",
  "references": [
    "FIPS 186-5; NIST SP 800-57 Part 2 Rev.1",
    "FIPS 201-3",
    "FIPS 204",
    "CNSSI 4009-2022 from CNSSI 1300; NIST SP 800-53 Rev. 5 from CNSSI 4009-2022",
    "NIST SP 1800-16B; NIST SP 1800-16C; NIST SP 1800-16D",
    "NIST SP 800-12 Rev. 1; NIST SP 800-175B Rev. 1",
    "NIST SP 800-95 from OASIS Glossary of Terms",
    "NIST SP 1800-12b",
    "NIST SP 800-57 Part 1 Rev. 5",
    "NIST SP 800-63-4; NIST SP 800-63A-4",
    "NISTIR 7711; NISTIR 8149",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/public-key-infrastructure-pki/"
}