The trust is maintained in the integrity of the CA's private root key, which is used to sign certificates. If the root key is compromised, all signed certificates are invalid. The RA is a widely deployed optional component used for registering users through an organization official or through electronic signing. Users request certificates through the RA, which sends them to the CA for signing. It can either stand alone or be companywide.
AAs contain attribute certificates tied to users' public certificates.
The AA has a signed certificate from a trusted root and returns signed certificates when required. By the time you read this column, many of the questions racing through my mind probably will have been answered, but I'm guessing the answers will not be satisfactory. I am writing this on Tuesday, September 11, the day we, as American citizens, lost our innocence. Due to the tragic events within our country, The Network Computing Shoot Out and Best of Show Awards ceremony have been postponed until a later date. Please check back for information on revised event dates.