ืืืืขืจื ืงืขื ืขื ื ืื ืืืื ืืจืึทืกืืื. ืคึฟืึทืจ ืื ืจืืึฟ ืืืื, ืืื ืืขื ืขื ืคืืื ืืื ืงืืืึทืื ืืจืืืกื ืึทื ืฉืืึธื ืคืื ืืืืขืจืืืึทื. ืืืื ืกืืึทืืืกืืืง, 21% ืฉืจืืึทืื ืืืืขืจ ืคึผืึทืกืืืขืจืื ืคึฟืึทืจ ืึทืจืืขื ืึทืงืึทืื ืฅ ืืืืฃ ืคึผืึทืคึผืืจ, 50% ืึธื ืืืืึทืื ืื ืืขืืืข ืคึผืึทืกืืืขืจืื ืคึฟืึทืจ ืึทืจืืขื ืืื ืคึผืขืจืืขื ืืขื ืืึทืืื ืื ืืก.
ืื ืกืืืื ืืื ืืืื ืคืืื ืืืขื. 74% ืคืื ืึธืจืืึทื ืึทืืืืฉืึทื ื ืืึธืื ืคืขืจืืขื ืืขืืข ืืขืืืืกืขืก ืฆื ืืืื ืืขืืจืืื ืฆื ืึทืจืืขืื ืืื ืงืึธื ื ืขืงืืขื ืฆื ืื ืคึฟืืจืืข ื ืขืฅ. 94% ืคืื ืืืืขืจื ืงืขื ืขื ื ืืฉื ืืืกืืืืื ืึท ืคืึทืงืืืฉ E- ืืจืืื ืคืื ืึท ืคืืฉืื ื ืืืื ืขืจ, 11% ืงืืืงื ืืืืฃ ืึทืืึทืืฉืืึทื ืฅ.
ืึทืืข ืื ืคึผืจืึธืืืขืืก ืืขื ืขื ืกืึทืืืื ืืืจื ืึท ืคึฟืืจืืข ืฆืืืืจ ืฉืืืกื ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ (PKI), ืืืึธืก ืืื ืขื ืงืจืืคึผืฉืึทื ืืื ืึธืืขื ืืึทืงืืืฉืึทื ืคืื ืคึผืึธืกื, ืืื ืจืืคึผืืืืกืื ืคึผืึทืกืืืขืจืื ืืื ืืืืืืึทื ืกืขืจืืืคืืงืึทืฅ. ืื ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืงืขื ืขื ืืืื ืืืืคืฉืืืื ืืืืฃ Windows Server. ืืืื Active Directory Certificate Services (AD CS) ืืื ืึท ืกืขืจืืืขืจ ืืืึธืก ืึทืืึทืื ืืืจ ืฆื ืฉืึทืคึฟื ืึท PKI ืืื ืืืื ืึธืจืืึทื ืืืึทืฆืืข ืืื ื ืืฆื ืขืคื ืืืขื ืฉืืืกื ืงืจืืคึผืืึธืืจืึทืคื, ืืืืืืึทื ืกืขืจืืืคืืงืึทืฅ ืืื ืืืืืืึทื ืกืืื ืึทืืฉืขืจื.
ืึธืืขืจ ืืืืงืจืึธืกืึธืคึฟื ืก ืืืืืื ื ืืื ืืึทื ืฅ ืืืึทืขืจ.
ืืึทื ืฅ ืงืึธืก ืคืื ืึธืื ืขืจืฉืืคึผ ืคึฟืึทืจ ืึท ืคึผืจืืืืึทื ืกืขืจืืืคืืงืึทื ืืืืืึธืจืืืขื ืคืื ืืืืงืจืึธืกืึธืคึฟื
ืคืึทืจืืืืึทื ืคืื ืงืึธืก ืคืื ืึธืื ืขืจืฉืืคึผ ืคืื Microsoft CA ืืื GlobalSign AEG.
ืืื ืคืืืข ืกืืืืึทืืืึธื ืก, ืขืก ืืื ืืขืจ ืืึทืงืืืขื ืืื ืืฉืืคึผืขืจ ืฆื ืฉืึทืคึฟื ืื ืืขืืืข ืคึผืจืืืืึทื ืกืขืจืืึทืคืึทืงืืืฉืึทื ืืืืืึธืจืืืขื, ืึธืืขืจ ืืื ืคืื ืืจืืืกื ืืืง ืคืึทืจืืืึทืืืื ื. GlobalSign Auto Enrollment Gateway (AEG) ืกืึทืืืื ืคึผืื ืงื ืืขื ืคึผืจืึธืืืขื. ืขืืืขืืข ืคึผืจืืึทื ืฉืืจืืช ืืขื ืขื ืืงืกืงืืืืื ืคืื ืื ืืึทื ืฅ ืงืึธืก ืคืื ืึธืื ืขืจืฉืืคึผ (ืงืืืคื ืืืกืจืืื, ืฉืืืฆื ืงืึธืก, ืคึผืขืจืกืึทื ืขื ืืจืืื ืื ื, ืืื"ื ื). ืกืืืืืื ืื ืงืขื ืขื ืืงืกืื .
ืืืึธืก ืืื AEG
(AEG) ืืื ืึท ืืืืืืืืืจื ืืื ืกื ืืืึธืก ืึทืงืขืจื ืืื ืึท ืืืืืืืื ืฆืืืืฉื GlobalSign ืก ืกืึทืึทืก ืืึทืืืืึทืื ืืึทืืื ืื ืืก ืืื ืื Windows ืคืึทืจื ืขืืื ื ืกืืืืืืข.
AEG ืื ืืึทืืจืืืฅ ืืื Active Directory, ืึทืืึทืืื ื ืึธืจืืึทื ืึทืืืืฉืึทื ื ืฆื ืึธืืึทืืืื ืื ืขื ืจืึธืืืืึทื ื, ืคึผืจืึทืืืืืฉืึทื ื ืืื ืคืึทืจืืืึทืืืื ื ืคืื GlobalSign ืืืืืืึทื ืกืขืจืืืคืืงืึทืฅ ืืื ืึท Windows ืกืืืืืืข. ืืืจื ืจืืคึผืืืืกืื ื ืื ืขืจืืขื CAs ืืื GlobalSign ืืึทืืื ืื ืืก, ืขื ืืขืจืคึผืจืืกืขืก ืคืึทืจืืจืขืกืขืจื ืืืืขืจืืืื ืืื ืจืขืืืฆืืจื ืื ืงืึธืก ืคืื ืึธื ืคืืจืื ื ืึท ืงืึธืืคึผืืขืงืก ืืื ืืืึทืขืจ ืื ืขืจืืขื ืืืงืจืึธืกืึธืคื CA.
GlobalSign SaaS Certificate Services ืืื ืึท ืืขืจ ืืืืขืจ ืึธืคึผืฆืืข ืืื ืฉืืืึทื ืืื ืึทื ืืึทื ืืืืฉื ืกืขืจืืืคืืงืึทืฅ ืืืืฃ ืืืื ืืืืืขื ืข ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ. ืืืืืึทื ืืืืื ื ืื ื ืืื ืฆื ืคืืจื ืึท ืืืื-ืืื ืืขื ืกืืืืข ืื ืขืจืืขื CA ืจืึทืืืกืึทื ืื ืืึทื ืฅ ืงืึธืก ืคืื ืึธืื ืขืจืฉืืคึผ ืคืื PKI ืืื ืืขืืื ื ืืื ืื ืจืืืืงืืจื ืคืื ืกืืกืืขื ืคืืืืืขืจื.
ืฉืืืฆื ืคึฟืึทืจ SCEP ืืื ACME ืคึผืจืึธืืึธืงืึธืืก ืืงืกืืขื ืื ืฉืืืฆื ืืืืึทืืขืจ ืคืื Windows, ืึทืจืืึทื ืืขืจืขืื ื ืึธืืึทืืืืืื ืกืขืจืืืคืืงืึทื ืืฉืืึทื ืก ืคึฟืึทืจ ืืื ืืงืก ืกืขืจืืืขืจืก, ืจืืจืขืืืืืง, ื ืขืฅ ืืื ืื ืืขืจืข ืืขืืืืกืขืก, ืืื ืืขืืื ื ืืื ืขืคึผื ืึธืกืงืก ืงืึธืืคึผืืืืขืจืก ืจืขืืืกืืจืืจื ืืื ืึทืงืืืื Directory.
ืขื ืืึทื ืกื ืืืืขืจืืืึทื
ืืื ืึทืืืฉืึทื ืฆื ืฉืคึผืึธืจื ืืืืืฉืขื, ืคืื ืืจืืืกื ืืืง PKI ืคืึทืจืืืึทืืืื ื ืืืคึผืจืืืื ืกืืกืืขื ืืืืขืจืืืื. ืืื ืื ืืขืืืืื ืืื ืื ืึทืืขืจืืขืขื ืืจืืคืข ืืขืจื ืขื, ืกืขืจืืืคืืงืึทืฅ ืืขื ืขื ืื ืงืจืืกืื ืืื ืืึทืจืืขืืขื ืืืจื ืึทืืึทืงืขืจื, ืืืึธืก ืืฆืืื ืืืืืจืข ืืึทืืืืกื ืืืึทืื ืขืจืึทืืืืืืื ืึทืืึท ืืื ืฉืืืึทื ืืื-ืืขืืชืืขื ืกืขืจืืืคืืงืึทืฅ, ืฉืืืึทื ืขื ืงืจืืคึผืฉืึทื ืืื ืงืึทืืืขืจืกืึทื ืจืขืืืึธืงืึทืืืึธื ืืขืงืึทื ืืืึทืื. ืืื ืึทืืืฉืึทื, ืึทืืึทืงืขืจื ืืึธืื ืืึทืกืืขืจื ืืขืจ ืกืึทืคืืกืืึทืงืืืืื ืขืงืกืคึผืืืืฅ, ืึทืืึท ืืื ืคืจืึธืืืฉืึทืืึทื ืืื ืึทืจืืืกืืขืื ืกืขืจืืืคืืงืึทืฅ ืคืื ืืจืึทืกืืื CAs ืืื ืคืึธืจืืื ื ืงืึธื-ืกืืื ืื ื ืกืขืจืืืคืืงืึทืฅ.
"ืจืืึฟ ืขื ืืขืจืคึผืจืืกืขืก ืืขื ืขื ื ืืฉื ืคึผืจืึธืืึทืงืืืื ืืขื ืื ืืื ืึธื ืคืืจืื ื ืื ืจืืกืงืก ืคึฟืึทืจืืื ืื ืืื ืื ืื ืคืืื ืืื ืืขื ืขื ื ืืฉื ืืจืืื ืฆื ืจืืกืคึผืึทื ื ืืขืฉืืืื ื ืฆื ืื ืืจืืืืึธืคืก," Derek E. Brink ืืื ืืืืฆืข ืคึผืจืขืืืืขื ื ืืื IT ืืืืขืจืืืื ืืื ืืขืจืืึทื ืืื Aberdeen Group. "ืืืจื ืืขืื ืขื ืืขืจืคึผืจืืกืขืก ืฆื ืฉืืขืื ืื ืึทืคึผืขืจืืืฉืึทื ืึทื ืึทืกืคึผืขืงืฅ ืคืื ืืึทืืืืึทืื ืคืึทืจืืืึทืืืื ื ืืื ืื ืืขื ื ืคืื ืขืงืกืคึผืขืจืฅ ืืื ืืึทืืื ืคึฟืืจืืข ืงืึธื ืืจืึธื ืืืืขืจ ืืจืืคึผืข ืคึผืึทืืึทืกืื ืืื ืึทืงืืืืืข Directory, GlobalSign ืืืื ืฆื ืืขืื ืฆืืงืื ืคึฟื ืืืึผืงืก ืืื ืืึทืืืืึทืื ืืึทื ืืฅ ืืืจื ืึทืืจืขืกืื ื ืคึผืจืึทืงืืืฉ ืืืืขืจืืืื ืืื ืฆืืืจืื ืืฉืื ืืื ืึทื ืขืคืขืงืืืื, ืงืึธืก- ืขืคืขืงืืืื ืืืคึผืืืืืึทื ื ืืึธืืขื."
ืืื ืืื AEG ืึทืจืืขื?
ื ืืืคึผืืฉ AEG ืกืืกืืขื ืืืื ืคืืจ ืฉืืืกื ืงืึทืืคึผืึธืื ืึทื ืฅ ืฆื ืขื ืฉืืจ ืึทื ืื ืจืืืืืง ืกืขืจืืืคืืงืึทืฅ ืืขื ืขื ืืืจืืืขืืื ืืขื ืฆื ืื ืจืืืืืง ืึทืงืกืขืก ืคืื ืงืื:
- AEG ืืืืืืืืืจื ืืืืฃ Windows ืกืขืจืืืขืจ.
- ืึทืงืืืืืข Directory ืกืขืจืืืขืจืก ืึธืืขืจ ืคืขืื ืงืึทื ืืจืึธืืืขืจื ืืืึธืก ืืึธืื ืึทืืืื ืืกืืจืึทืืึธืจืก ืฆื ืคืืจื ืืื ืงืจืึธื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืจืขืกืืจืกื.
- ืขื ืืคึผืึธืื ืฅ: ืืืืขืจื, ืืขืืืืกืขืก, ืกืขืจืืืขืจืก ืืื ืืืขืจืงืกืืืืฉืึทื ื - ืึผืืขื ืงืืื ืขื ืืืื ืืืึธืก ืืื ืึท "ืงืึทื ืกืืืขืจ" ืคืื ืืืืืืึทื ืกืขืจืืืคืืงืึทืฅ.
- GlobalSign Certificate Authority ืึธืืขืจ GCC, ืืืึธืก ืืืฆื ืืืืฃ ืฉืคึผืืฅ ืคืื ืึท ืืจืึทืกืืื ืกืขืจืืืคืืงืึทื ืืฉืืึทื ืก ืืื ืคืึทืจืืืึทืืืื ื ืคึผืืึทืืคืึธืจืืข. ืืึธืก ืืื ืืื ืกืขืจืืืคืืงืึทืฅ ืืขื ืขื ืืืฉืขื ืขืจืืืืึทื.
ืืจืื ืคืื ืื ืคืืจ ืงืึทืืคึผืึธืื ืึทื ืฅ ืืขืืืืื ืืขื ืขื ืืืืฃ-ืืึธืงืึทื ืืื ืืขืจ ืงืื ื, ืืื ืืขืจ ืคืขืจื ืืื ืืื ืื ืืืึธืืงื.
ืขืจืฉืืขืจ, ืื ืขื ืืคึผืึธืื ืฅ ืืขื ืขื ืคืึทืจ-ืงืึทื ืคืืืืขืจื ืืื ืืจืืคึผืข ืคึผืึทืืึทืกืื: ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืึทืืืืึทืื ืืืขืจืึทืคืึทืงืืืฉืึทื ืคึฟืึทืจ ืืึทื ืืฆืขืจ ืึธืืขื ืืึทืงืืืฉืึทื, S / MIME ืืขืื ืคึฟืึทืจ ืื ืืึทืืืืึทืื, ืืื ืึทืืื ืืืืฃ, ืคึฟืึทืจ ืกืึทืืกืึทืงืืืึทื ื ืงืฉืจ ืฆื ืื AEG ืกืขืจืืืขืจ. ืืขืจ ืงืฉืจ ืืื ืืืืขืจ ืืืจื ืืืืคึผืก.
ืืขืจ AEG ืกืขืจืืืขืจ ืงืืืขื ืงืืขื ืึทืงืืืืืข Directory ืืืจื LDAP ืฆื ืงืจืืื ืึท ืจืฉืืื ืคืื ืืึทืืืืึทืื ืืขืืคึผืืึทืืขืก ืคึฟืึทืจ ืื ืขื ืืคึผืึธืื ืฅ, ืืื ืกืขื ืื ืื ืจืฉืืื ืฆื ืงืืืืึทื ืฅ ืฆืืืืืขื ืืื ืื ืึธืจื ืคืื ืื ืืึทืืืืึทืื ืืืืืึธืจืืืขื. ื ืึธื ืจืืกืืืืื ื ืื ืึผืืืื, ืื ืขื ืืคึผืึธืื ืฅ ืคืึทืจืืื ืื ืฆื ืื AEG ืกืขืจืืืขืจ ืืืืืขืจ, ืืึธืก ืืึธื ืฆื ืืขืื ืื ืคืึทืงืืืฉ ืกืขืจืืืคืืงืึทืฅ. AEG ืงืจืืืืฅ ืึท ืึทืคึผื ืจืืคื ืืื ืื ืกืคึผืขืกืืคืืขื ืคึผืึทืจืึทืืขืืขืจืก ืืื ืกืขื ืื ืขืก ืฆื ืื GlobalSign Certificate Authority ืึธืืขืจ GCC ืคึฟืึทืจ ืคึผืจืึทืกืขืกืื ื.
ืฆืื ืกืืฃ, ืื GCC ืืึทืงืขื ื ืคึผืจืึทืกืขืกืึทื ืื ืจืืงืืืขืก, ืืืืฉืึทืืืึทืื ืืื ืึท ืืืกื ืกืขืงืื ืืขืก, ืืื ืกืขื ืื ืึท ืขื ืืคืขืจ ืฆื ืื API ืฆืืืืืขื ืืื ืึท ืืึทืืืืึทืื ืืืึธืก ืืืขื ืืืื ืืื ืกืืึทืืืจื ืืืืฃ ืื ืขื ืืคึผืืื ืฅ ืืืืฃ ืืขืื.
ืืขืจ ืืื ืฆืขืจ ืคึผืจืึธืฆืขืก ื ืขืื ืึท ืืืกื ืกืขืงืื ืืขืก ืืื ืงืขื ืขื ืืืื ืืึธืจ ืึธืืึทืืืืืื ืืืจื ืงืึทื ืคืืืืขืจืื ื ืขื ืืคึผืึธืื ืฅ ืฆื ืืืืืึธืืึทืืืฉ ืืึทืงืืืขื ืกืขืจืืืคืืงืึทืฅ ื ืืฆื ืืจืืคึผืข ืคึผืึทืืึทืกืื.
ืืื ืฆืืง AEG ืคึฟืขืึดืงืืืื
- ืืืจ ืงืขื ื ืจืขืืืกืืจืืจื ืืืจื ืื MDM ืคึผืืึทืืคืึธืจืืข.
- ืืขืืืขืืึธืคึผืขื ืืืจื ืขืจืฉืืข ืขืืคึผืืืืื ืคืื ืื ืืืงืจืึธืกืึธืคื ืงืจืืคึผืืึธ ืืึทื ืฉืึทืคึฟื.
- ืงืืืขื ืืืขืกืก ืืืืืื ื.
- ืกืืืคึผืืึทืคืืื ืืืคึผืืึทืืขื ืืืืฉืึทื ืืื ืืืืคืกืืืง ืคืึทืจืืืึทืืืื ื.
ืืืืฉืคืืื ืคืื ืึทืจืงืึทืืขืงืืฉืขืจื
ืืืื, ืคืื ืืจืืืกื ืืืง PKI ืคืึทืจืืืึทืืืื ื ืืืจื ืื GlobalSign AEG ืืืืืืืื ืืืื ืืขืืืืงืกื ืืืืขืจืืืื, ืงืึธืก ืกืืืืืื ืื ืืื ืจืืืืกื ืจืืืืงืืจื. ืื ืื ืืขืจ ืืืึทืืข ืืื ืืจืื ื ืกืงืึทืืึทืืืืืื ืืื ืืขืืืืงืกื ืคืึธืจืฉืืขืืื ื. ืืขืืขืจืืง PKI ืคืึทืจืืืึทืืืื ื ืื ืฉืืจื ืืึทื ื ืืคึผืืืืข, ืืืืืึทื ืืืฅ ืื ืืืขืจืจืืึทืก ืคืื ืืืกืืข-ืงืจืืืืฉ ืึทืคึผืขืจืืืฉืึทื ื ืจืขืื ืฆื ืคืึทืจืงืจืืคึผืื ืกืขืจืืืคืืงืึทืฅ, ืืื ืึธืคืคืขืจืก ืขืืคึผืืืืื ืืืืึทื, ืืืืขืจ ืึทืงืกืขืก ืฆื ืคืืจืืข ื ืขืืืืึธืจืงืก.
ืฉืืืฆื ืึท ืืจืืื ืงืืื ืคืื ื ืืฆื ืงืึทืกืขืก ืืืึธืก ืืึทืจืคื ืฆืืืื-ืคืึทืงืืึธืจ ืึธืืขื ืืึทืงืืืฉืึทื: ืคึฟืื ืืืืึทื ืืืขืจืงืืจืืคึผ ืงืืืืึทื ืฅ ืึทืงืกืขืก ืื ื ืขืฅ ืืืจื VPN ืืื Wi-Fi, ืฆื ืคึผืจืืืืืืืืฉื ืึทืงืกืขืก ืฆื ืืขืืกื ืฉืคึผืืจืขืืืืืง ืจืขืกืืจืกื ืืืจื ืงืืื ืงืึทืจืืก.
GlobalSign ืืื ืึท ืืืืืืืข ืคืืจืขืจ ืืื ืคึผืจืึทืืืืืืื ื ืืืึธืืงื ืืื ื ืขืฅ PKI ืืืืขื ืืืืขื ืืื ืึทืงืกืขืก ืคืึทืจืืืึทืืืื ื ืกืึทืืืฉืึทื ื. ืคึฟืึทืจ ืืขืจ ืืืืืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ืคึผืจืึธืืืงืื, ืืืืข ืงืึธื ืืึทืงื .
ืืงืืจ: www.habr.com