HP 635n - JetDirect IPv6/IPsec Print Server How To Use Manual page 13

Jack
Jack
Jack's Private Key
(Stays Private)
Jack goes through a key pair generation process and creates a public and private key pair. The
private key is kept secret. The public key is associated with some identity information and is given to
a Certificate Authority. The certificate authority generates a certificate, usually specific to a purpose
such as email, and signs the certificate with its digital signature. Assuming there is a place where
these digital certificates are publicly available, as long as Jack and John can agree to trust a specific
certificate authority, they'll be fine trusting certificates signed by that authority. Refer to Figure 15.
Create
Jack's Public Key
Key Pair
Jack's Private Key
Identity Info +
Jack's Public Key
(Also performs Identity Verification on Jack)
Certificate Request
Identity Info +
CA Info +
Jack's Public Key
CA's Digital
Signature
Jack's Public Key
Certificate
Figure 14 – Certificate Authority
13
Certificate Authority
Identity Info +
CA Info +
Jack's Public Key
Preliminary Certificate
One-Way Function/Hash Function
Encryption
CA's Public Key
CA's Private Key