Training - PKI at the Edge with Bouncy Castle and EJBCA

This training shows how to use the Bouncy Castle APIs for generating certificates and certification requests, including for EJBCA. We will also look at Kotlin DSL as a scripting language to enable people who do not typically regard themselves as programmers to perform some of the basic tasks as well.

In the training, Certificate Management Protocol (CMP) is used as an enrollment protocol for issuing certificates. Read more in Tech update – CMP in EJBCA and Bouncy Castle: https://www.ejbca.org/news/tech-updat....

As great as the progress has been in PKI tooling, there are still some situations which require a hands-on approach to deploying and establishing certificates and storing their associated private keys. Sometimes involving tasks that must be performed by system administrators rather than developers so having to edit Java programs might not be the best choice.

To take full advantage of the training content, you will need a background in Java development. The course material will suit developers who are beginners up to intermediate in terms of their experience with PKI and cryptography.

After the training, you will be able to:
Determine the right key strengths for the security level you need
Have a basic understanding of standard certificate request protocols and the relative security of some asymmetric algorithms
Determine what type of certification request is appropriate for your key pair
Create certification requests using the Bouncy Castle APIs for Java and Kotlin
Create certificates using the Bouncy Castle APIs and EJBCA
Save and encrypt private keys using the Bouncy Castle APIs for Java and Kotlin
Use KeyStores and understand their limitations in certified environments

The training is held by:
David Hook, Bouncy Castle Developer
Bastian Fredriksson, Solution Consultant

For how-to guides and exercises, see https://docs.keyfactor.com/bouncycast...