Identity & Certificate Management Flashcards

What is the primary role of the Membership Service Provider (MSP) in Hyperledger Fabric?

Answer: To define the rules for validating identities and determining member privileges

MSP defines the cryptographic material and rules used to validate identities and determine the privileges of members within a Fabric network.

Which certificate format does Hyperledger Fabric use for identity management?

Answer: PEM-encoded X.509 certificates

Hyperledger Fabric uses PEM-encoded X.509 certificates as the standard format for representing digital identities across the network.

What is the function of Fabric CA in a Hyperledger Fabric network?

Answer: To issue and manage X.509 certificates for network identities

Fabric CA provides certificate issuance, renewal, and revocation services for all identities participating in the Fabric network.

Which command is used to obtain an enrollment certificate from Hyperledger Fabric CA?

Answer: fabric-ca-client enroll

The `fabric-ca-client enroll` command retrieves an enrollment certificate (ECert) from the Fabric CA for a previously registered identity.

What is an enrollment certificate (ECert) in Hyperledger Fabric?

Answer: A long-term identity certificate issued to network participants

An ECert is a long-term identity certificate issued by the enrollment CA that establishes the permanent identity of a user or node in the Fabric network.

What is the purpose of the TLS CA in Hyperledger Fabric?

Answer: To provide certificates for securing communication channels between nodes

The TLS CA issues certificates used to secure transport-layer communications between Fabric components such as peers, orderers, and clients.

Which cryptographic algorithm is used by default for key generation in Hyperledger Fabric's BCCSP?

Answer: ECDSA with curve P-256

Hyperledger Fabric uses ECDSA (Elliptic Curve Digital Signature Algorithm) with the P-256 curve as the default for key generation and transaction signing.