Because of the growing variety of certificates in use today and the growing number of certificate issues, some organizations may want to manage certificate trust and prevent users in the domain from configuring their own set of trusted root certificates. Some organizations may want to identify and distribute specific trusted root certificates to enable business scenarios where additional trust relationships are needed. Depending the circumstances you will need to have licensing applied and any special license agreement for the use or distribution of these root certificates. However, if the organization that you are with requires that you obtain a license agreement in order to include into your application for use then we have come to these obligations. The company may, in its discretion, include the Root Certificates as trusted roots in any versions of the Products to be commercially released during the Term of the Agreement. The updated Root Certificates in the company’s product may be accomplished by embedding the Root Certificate either within the product or through a patch or update release. A root certificate is the top most certificate in the highest position, the private key of which is used to sign other certificates. All certificates immediately below the root certificate inherit the trustworthiness of the root certificate and a signature by a root certificate is basically analogous to notarizing. Using a PKI would establish and maintain a trustworthy networking environment by providing key and certificate management services that enable encryption and digital signature capabilities across applications all in a manner that is easy to use. For our organization confidentiality, authentication, integrity, and non-repudiation are the four most important ingredients required for trust in an e-commerce type transaction. PKI employs digital certificates, which are bindings of certificate owner identity information and public keys. PKI allows users to request certificates, use certificates, and revoke certificates. By leveraging digital certificates and relevant services like certificate distribution and blacklist publication, PKI supports authentication the entities involved in communication, and thus guaranteeing the confidentiality, integrity and non-repudiation of data. The PKI technology can satisfy the security requirements of online transactions. As an infrastructure, PKI has a wide range of applications. Some of those applications can include a virtual private network which is a proprietary data communication network built over the public communication infrastructure. A virtual private network can leverage network layer security protocols in conjunction with PKI-based encryption and digital signature technologies for confidentiality. E-mails also require confidentiality, integrity, authentication, and non-repudiation and some secure protocols are based on PKI and allows the transfer of encrypted e-mails and e-mails with signature. Last, with web security two peers can establish a Secure Sockets Layer connection first for transparent and secure communications at the application layer. With PKI, Secure Sockets Layer enables communications with encryption between a browser and a server. This is so both the communication parties can identify the identity of each other through digital certificates. When thinking about security, it is helpful to think in terms of assets, threats, vulnerabilities, and attacks. This leads us back to the fundamentals of security which is the basic foundation including authentication, authorization, auditing, confidentiality, integrity, and also availability. Confidentiality is the prevention of unauthorized disclosure of information. Integrity aims at ensuring that information is protected from unauthorized or unintentional alteration, modification, or deletion. Availability aims to ensure that information is readily accessible to authorized users. On one side PKI can be broken down into methods, technologies and techniques that together provide a secure infrastructure. On the other side, PKI may mean the use of a public key and private key pair for authentication and proof of content. Many benefits are provided through these means like certainty of the source and destination of that information, assurance of the time and timing of that information, and certainty of the quality of information sent and received electronically. On one side PKI can be broken down into methods, technologies and techniques that together provide a secure infrastructure. On the other side, PKI may mean the use of a public key and private key pair for authentication and proof of content. Many benefits are provided through these means like certainty of the source and destination of that information, assurance of the time and timing of that information, and certainty of the quality of information sent and received electronically. A CA issues and verifies certificates while also taking responsibility for identifying the correctness of the identity of the person asking for a certificate to be issued, and ensures that the information contained within the certificate is correct and digitally signs it. Benefits of a CA may also state the quality of the checks that were carried out before the certificate was issued. Different classes of certificate can be purchased that correspond to the level of checks made. The CA issues you a certificate after you provide the credentials they require to confirm your identity, and then the CA signs the certificate to prevent modification of the details contained in the certificate.