Scenario 2: Using Individual PSEs for Components 

In this scenario, you create an individual PSE for each component. To establish the necessary trust relationships between these components, you must then exchange the corresponding public-key certificates. For each of the servers, export the server's public-key certificate and import it into its partners' PSEs. See the graphic below:

Using Individual PSEs and Exchanging Public-Key Certificates

Advantages

·        Security and transparency are increased. Each component possesses its own security identity and information.

·        Problem analysis is also more transparent. Error messages and trace information contain the component's security identity, and because this information is no longer shared, it is easier to isolate problems if they occur.

Disadvantages

The initial administration tasks are more complex. To establish the necessary trust relationships, you must exchange the public-keys belonging to each of the communication partners for each communication path.