Date Published: October 2017
Comments Due:
Email Questions to:
Author(s)
William Haag (NIST), W. Polk (NIST), Murugiah Souppaya (NIST), William Barker (Dakota Consulting), Paul Turner (Venafi), Russ Housley (Vigil Security)
Announcement
This project provides guidance on the governance and management of Transport Layer Security (TLS) server certificates in enterprise environments to reduce outages, improve security, and enable disaster recovery related to certificates. The project will be result in a freely available NIST Cybersecurity Practice Guide, documenting an example solution that demonstrates how to perform the following actions:
- develop a set of policy attributes;
- establish and maintain an inventory of TLS certificates;
- assign and track certificate owners;
- identify issues and vulnerabilities of the TLS infrastructure;
- automate enrollment and installation;
- report the status of the TLS certificates; and
- continuously monitor TLS certificates in the typical enterprise environment.
This project provides guidance on the governance and management of Transport Layer Security (TLS) server certificates in enterprise environments to reduce outages, improve security, and enable disaster recovery related to certificates. The project will be result in a freely available NIST Cybersecurity Practice Guide, documenting an example solution that demonstrates how to perform the following actions:
- develop a set of policy attributes;
- establish and maintain an inventory of TLS certificates;
- assign and track certificate owners;
- identify issues and vulnerabilities of the TLS infrastructure;
- automate enrollment and installation;
- report the status of the TLS certificates; and
- continuously monitor TLS certificates in the typical enterprise environment.
This project provides guidance on the governance and management of Transport Layer Security (TLS) server certificates in enterprise environments to reduce outages, improve security, and enable disaster recovery related to certificates. The project will be result in a freely available NIST...
See full abstract
This project provides guidance on the governance and management of Transport Layer Security (TLS) server certificates in enterprise environments to reduce outages, improve security, and enable disaster recovery related to certificates. The project will be result in a freely available NIST Cybersecurity Practice Guide, documenting an example solution that demonstrates how to perform the following actions:
- develop a set of policy attributes;
- establish and maintain an inventory of TLS certificates;
- assign and track certificate owners;
- identify issues and vulnerabilities of the TLS infrastructure;
- automate enrollment and installation;
- report the status of the TLS certificates; and
- continuously monitor TLS certificates in the typical enterprise environment.
Hide full abstract
Keywords
transport layer security (TLS); certificate management; private-key security; certification authority (CA); CA compromise; automatic certificate management environment (ACME); secure sockets layer (SSL); public key infrastructure (PKI)
Control Families
None selected
