Question

Submit a Word document that briefly describes your Certificate Authority (CA/PKI) strategy for Bayside Memorial’s network. Keep in mind certificate exchanges will be required internally for the in-house EMR system, as well as externally for insurance providers, etc.

Answer 1

Note: CA here in the answer means Certificate Authority

Segmenting the role of the Root CA and Issuing CA to provide a secure configuration.

Keeping the Root CA offline, thus allowing the private key of the Root CA to be more secure.

Allowing multiple deployment of Issuing CAs at different geographical locations.

Greater control of Issuing CAs at different security levels.

Less management and implementation than a three-tier design.

Greater security than a single tier design.

More scalability for the security environment by deploying more Issuing CA.