Masterclass: Public Key Infrastructure Management [PKI]

OVERVIEW

This 5-‐day course is considered essential for anyone who would like to expand knowledge about Public Key Infrastructure (PKI) in Microsoft technologies. During the course PKI is covered in depth, starting from the best practices for implementing PKI, ending up with advanced issues that happen during the implementation.

OBJECTIVES

At the end of the course you will be able to:

• Learn how to evaluate and select appropriate PKI technology
• Understand the benefits of certificates used in the infrastructure
• Learn how to install and configure PKI environment according to the best practices taken from practical experience
• Learn how to choose the right architecture, infrastructure, and practices for PKI implementation
• Learn how to manage the certificate lifecycle
• Adjust PKI to your business needs
• Become familiar with advanced PKI settings and implementations

All exercises are based on Windows Server 2012 R2 and Windows 8.1. Some examples are also shown on Windows Server 2012 to accommodate the difference.

AUDIENCE

Network administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security, Chief Security Officers.

CONTENT

Module 1: Foundations of PKI

• Cryptography basics
• Certificate types (﴾X.509)﴿
• Certification authorities
• Certificate Revocation Lists

Module 2: Policies and PKI

• Security Policy
• Certificate Policy
• Certification Practice Statements

Module 3: PKI in Windows domain

• Managing PKI
• Configure Certificate Templates
• Configure Certificate Enrollment
• Configuring Key Archival and Recovery
• Configuring Trust Between Organizations
• Deploying Smart Cards

Module 4: Designing and implementing CA Hierarchy

• Planning
• Preparing AD Environment
• Implementing CA Hierarchy

Module 5: Upgrading PKI Infrastructure

• Supported scenarios
• Upgrading certificate templates

Module 6: PKI Security

• Deploying certificates to Domain Controllers
• Securing CA Hierarchy
• Certificate Revocation
• Certificate Validation
• Role separation
• Planning and implementing disaster recovery
• Archiving encryption keys

Module 7: Deploying application-‐specific solutions

• Secure Web Traffic by Using SSL
• Configure email security
• Encrypting file system
• VPN
• Wireless Networking
• Document and code signing
• AD RMS -‐ design and configuration