Training agenda

Introduction to Public Key Infrastructure (PKI)

Coding
Digital certificates
Public and Private Certification Authorities

Planning PKI services

Microsoft AD CS (Active Directory Domain Services)
Infrastructure elements
HSM – Hardware Security Modules

Installing and configuring domain environment

Hyper-V virtualization
Domain controllers
Workstations
Servers for PKI services

Root CA Server (Root Certification Authority)

Configuring AD CS role – Certification Authority (CA – CA Authority)
Planning Root CA server security
Distributing Root Certification Authority Certificate
CRL – Certificate Revocation Lists

Subordinate CA Servers (Subordinate Certification Authorities)

Configuring the AD CS role –Certification Authority
Distributing certificates for Subordinate Certification Authorities
CRL – Certificate Revocation Lists

Certificate templates

KRA – Key Recovery Agent
Windows Admin Center
Microsoft Identity Manager 2016
Microsoft Server Backup
Microsoft Azure Key Vault