military cac no client certificate presented

OCSP – Online Certificate Status Protocol – Similar to a CRL, but rather than a file is more of a webservice for requesting revocation status of a single certificate.ĪIA – Authority Information Access – Location listed on a certificate where the applicable OSCP server can be found. OID – Object Identifier – Reference number for a given EKUĬRL – Certificate Revocation List – Issued by a CA, lists all certificate serial numbers that CA has revoked.ĬDP – CRL Distribution Point – Location listed on a cert where the CRL can be retrieved from. The term has become overloaded, referring to the standard, card and/or certificate, unfortunately interchangeably.ĮKU – Enhanced Key Usage – Defines what a certificate can be used for. General term for a solution making use of X.509 solutions. Termsīelow is a table of terms that will be helpful to have an understanding of.ĬAC – Common Access Card. As the deployed solution is largely industry standard PKI, you should find that the technologies and processes have broader applicability than just this lab. This guide is intended to help folks get that baseline level of knowledge. A solid understanding of these capabilities is essential to being an effective IT administrator in this space.

DoD employs arguably one of the most sophisticated PKI deployments in the world, using PKI technologies for Logon, Email, Web Access and physical installation access.

BLUF: This guide will help you establish a complete DoD CAC lab environment for learning and testing.

Military cac no client certificate presented