What are the benefits of a delegated Certificate Authority (CA)?
The MTMO allows for the delegation of key management to adopters. The benefit of a delegated CA is that adopters can control the cost structure of key management either by establishing a CA in-house, outsourcing it to a service provider, or leveraging existing systems. This also allows adopters to design their own delegated trust hierarchy to meet individual business needs. For example, a large device manufacturer can design its trust hierarchy to have each geographical division be in charge of its own delegated CA; each geographical division can then delegate the CA responsibility to different sub-product divisions if the adopter chooses to. Alternatively, the device manufacturer can choose to have just one CA for all its devices and order all the device keys from a PDC (Provisioning Data Center).
Related Questions
- If I choose to set up my own Delegated Certificate Authority (DCA) rather than contracting to Seacert, are there any additional agreements I need to sign?
- What does it mean to be a Delegated Certificate Authority (DCA) and provisioning center?
- Does Domain Keys require signing of the public key by a Certificate Authority (CA)?
