PKI Uncovered: Certificate-Based Security Solutions for Next-Generation Networks (Cisco Press Networking Technology Series) - Softcover

The only complete guide to designing, implementing, and supporting state-of-the-art certificate-based identity solutions with PKI Layered approach is designed to help readers with widely diverse backgrounds quickly learn what they need to know Covers the entire PKI project lifecycle, making complex PKI architectures simple to understand and deploy Brings together theory and practice, including on-the-ground implementers' knowledge, insights, best practices, design choices, and troubleshooting details PKI Uncovered brings together all the techniques IT and security professionals need to apply PKI in any environment, no matter how complex or sophisticated. At the same time, it will help them gain a deep understanding of the foundations of certificate-based identity management. Its layered and modular approach helps readers quickly get the information they need to efficiently plan, design, deploy, manage, or troubleshoot any PKI environment. The authors begin by presenting the foundations of PKI, giving readers the theoretical background they need to understand its mechanisms. Next, they move to high-level design considerations, guiding readers in making the choices most suitable for their own environments. The authors share best practices and experiences drawn from production customer deployments of all types. They organize a series of design "modules" into hierarchical models which are then applied to comprehensive solutions. Readers will be introduced to the use of PKI in multiple environments, including Cisco router-based DMVPN, ASA, and 802.1X. The authors also cover recent innovations such as Cisco GET VPN. Throughout, troubleshooting sections help ensure smooth deployments and give readers an even deeper "under-the-hood" understanding of their implementations.

Andre Karamanian, CCIE R/S No. 10228, is a security consultant at Cisco with more than 11 years of IT security experience. He formerly worked with large custom clients as a security leader at a large service provider. Andre has completed graduate work in the area of network security and has multiple security certifications. He is currently conducting fundamental research in the development of industry security technologies.
Srinivas Tenneti, CCIE R/S, Security No. 10483, is an enterprise systems engineer at Cisco who has published design guides, white papers, and presentations on end-to-end security solutions for enterprise and commercial customers. He has helped several service providers validate their network designs and architectures.
Francois Dessart, CCIE Security No. 15962, is a security consultant at Cisco's European Advanced Services organization. He previously spent four years in Cisco's Security TAC, solving complex PKI and VPN customer issues.