Front cover - IBM Redbooks

Figure 2-16 Sample PKI digital certificate enrollment process flow
84 Lotus Security Handbook
The enrollment process flow depicted demonstrates the exchange of sensitive
user information and secrets, plus the export of the credential outside the control
of the issuer. The full enrollment scenario should include processes from a
corresponding information flow control subsystem. For public key credentials, the
format of certificates, along with details of how the credentials are formatted,
transported, and stored are important design considerations. All scenarios must
be validated against existing and proposed business processes. Validation of the
scenarios substantiates the architectural decisions discussed earlier.
Subsequent design steps are needed to develop and map the functions of the
security subsystems to Common Criteria specifications and ultimately onto the
nodes and physical components.