Deploying Microsoft Forefront Identity Manager 2010 Certificate Management with Hardware Security Modules: Best Practices for IT Security ... with Thales Hardware Security Modules

This technical book for information security professionals gives an introduction to Microsoft Forefront Identity Manager 2010 (FIM) and how to protect a FIM 2010 Certificate Management Server (CM) with Thales hardware security modules (HSMs). After an introduction to the policy, user, group and credential management in FIM 2010, you'll learn about profile templates, agent accounts, certificate types, management policies, and permissions. The book gives an introduction to hardware security modules and demonstrates how you can enhance FIM CM with HSMs. It walks you through the deployment, including certificate management platform support, network configurations, FIM connectivity to the HSM, firewall configurations, HSM configurations, and installing certificate management. Find out how to configure FIM CM with certificate templates, agent certificates, securing the FIM CM website, as well as installing CA modules. After connecting to the FIM CM web portal, you'll learn about how to leverage Thales HSMs for other FIM CM operations, such as key generation and some advanced configuration. The book closes with some best practices for certificate management.