Which description best defines Public Key Infrastructure (PKI)?

Which description best defines Public Key Infrastructure (PKI)?

• A. A single algorithm used to secure communications
• B. A trusted third party that issues digital certificates
• C. Hardware, software, people, policies, and procedures required to create, manage, distribute, use, store, and revoke digital certificates
• D. A protocol for exchanging keys

Answer: (C)

PKI is a comprehensive framework that enables trusted digital identities by issuing and managing digital certificates. It isn’t just one algorithm or a protocol; it combines hardware, software, people, policies, and procedures to create, manage, distribute, store, use, and revoke certificates throughout their lifecycle. The certificates themselves bind a public key to an identity, and trust in that binding comes from the ability to issue and revoke certificates through trusted authorities, such as CAs and RAs, and to publish revocation information. While a trusted third party that issues certificates is a key part of PKI, PKI as a whole covers the entire system of issuance, management, storage, revocation, and trust policies that make certificates reliable. The other options describe only a single component (an algorithm) or a separate concept (a key-exchange protocol), which don’t capture the full framework PKI represents.

PKI is a comprehensive framework that enables trusted digital identities by issuing and managing digital certificates. It isn’t just one algorithm or a protocol; it combines hardware, software, people, policies, and procedures to create, manage, distribute, store, use, and revoke certificates throughout their lifecycle. The certificates themselves bind a public key to an identity, and trust in that binding comes from the ability to issue and revoke certificates through trusted authorities, such as CAs and RAs, and to publish revocation information. While a trusted third party that issues certificates is a key part of PKI, PKI as a whole covers the entire system of issuance, management, storage, revocation, and trust policies that make certificates reliable. The other options describe only a single component (an algorithm) or a separate concept (a key-exchange protocol), which don’t capture the full framework PKI represents.