Securing cloud infrastructure through PKI

Cloud facility is becoming common day by day due to its elasticity nature and availability anywhere over the internet. Meanwhile it has also become a major security threat due to putting all data in the hands of cloud service providers. Mostly all cloud service providers claim that data uploaded on cloud is fully secure and un-accessible to un-authorized users but actually how much secure is this, we have to trust on cloud providers. Mostly all service providers claim that they have adopted secure techniques either to provide confidentiality or authenticity but there is a need that this security providing system can provide all security services as a single suite. This security service should be capable not only to provide simple security but all basic services of security that are authenticity, integrity, confidentiality and non-repudiation. In our work we establish a physical cloud, configure different machines offering different services and host Public Key Infrastructure service on it. Users and Computers authenticated successfully and got their certificate. Results show that PKI under cloud can be a good strategy to provide security to data to store on cloud storage and to services hosted on cloud as well. Challenges that may occur in cloud based PKI systems have also been specified.