PKI Training

Creating and managing a PKI requires ample knowledge about it, which Encryption Consulting brings along with the experience needed for organizations to have a custom solution for their needs. In our three days of PKI training delivered online, in-person training focusing on Microsoft Active Directory Certificate Service (ADCS) training, customers will learn how to deploy or design PKI solutions in the enterprise. You will learn how to build a PKI on Windows Server 2019, focusing on areas such as integration with HSM, Two-tier PKI, Cloud PKI, and more.

Class Audience

Beginners | Intermediate | Advance

hsm-training-by-employee

Strong Emphasis On:

PKI Operations
PKI Governance
PKI Design Best Practices
Hands-On Skills Lab

Course Contents

Day 1

Module 01: Introduction to PKI

  • Introduction to Cryptography
  • Symmetric Encryption
  • Asymmetric Encryption
  • Hash Functions and Digital Signatures
  • Introduction to HSM
  • Introduction to PKI

Module 02: Certificate Revocation and Chain Building

This module will Give you a vital understanding of

  • Certificate Verification and Chain Building
  • Certificate Revocation Lists (CRLs)
    • Functionality
    • Design considerations
    • How to deal with revocation cache
    • Lab 1: Deploying 2 tier PKI
  • Online Certificate Status Protocol (OCSP)
  • Troubleshooting

Day 2

Module 03: Deploy a Two-Tier PKI Hierarchy

In this module, you will learn:

  • Define CAPolicy.inf for root Certification Authority (CA) and subordinate CA
  • Active Directory Certificate Services (AD CS) PowerShell cmdlets
  • Install and configure offline root CA
  • Publish root CA certificate and CRL to CDP and AIA URLs
  • Install and configure subordinate CA
  • Post-install health checks
  • CA Security
  • Lab 2: Deploying OCSP

Module 04: Certificate Templates and Enrollment Methods

This module covers the purpose of certificate templates. Configuration and management will be explained in addition to different enrollment methods. This module will give you an overview of:

  • Certificate Templates
  • Template Versions
  • Configuration of Templates
  • Enrollment methods

Day 3

Module 05: Enhancements in Windows Server 2022 R2

Windows Server 2022 and Windows 11 introduce a lot of new PKI-related features:

  • New installation and deployment features
  • New Server Core features
  • Enhanced RPC Security
  • ADCS Site Awareness for ADCS and PKI Clients
  • Support for Internationalized Domain Names (IDNs)
  • Template management and Version 4 templates
  • Group Protected PFX
  • Certificate Lifecycle Notification
  • Key-based renewal
  • Certificate renewal with same key
  • TPM Key Attestation
  • Policy module for NDES

Module 06: Public Key Infrastructure (PKI) Maintenance & Availability Operations

CA Operations

  • Offline CA Maintenance
  • CA Backup
  • Private Key Backup & Storage
  • CA Renewal
  • Maintenance Tasks on a Clustered CA

Module 07: Cloud PKI Hierarchy

In this module, you will learn:

  • Different PKI Hierarchy in Cloud PKI deployment
  • AWS Certificate Manager (ACM)
  • AWS Private Certificate Authority (CA)
  • CA Security considerations in Cloud

Certificate of Completion

Every student that attends and completes the full training scoring 70% in the PKI exam will receive a certificate of completion. The certificate will allow student to qualify for ISC2 continuing education credit for annual CPE commitments.

On Demand PKI Training

On Demand

PKI Training

$2,500.00

Our on-demand PKI training offers the flexibility to learn at your own pace from anywhere in the world. Designed for busy professionals, this self-paced course helps you build essential skills with convenience and control.

ENROLL NOW

In Person

PKI Training

Upcoming Training Date: Nov 20th - Nov 22nd, 2024

$3,999.00

PKI course is recommended for anyone using or managing certificates, designing or deploying a PKI enterprise solution, or evaluating & selecting a commercial PKI Technology Solution

Category:

Description

TESTIMONIAL

What Our Students Say

Fantastic training for anyone looking to elevate and/or reduce knowledge gaps in the PKI space.

Simon Iokhvidson

AVM L.P. (Network Security and Infrastructure)

I took the PKI training course as a refresher for myself and as a training resource for my junior engineers. The course provided valuable insights and helpful information for all levels of PKI expertise. I highly recommend this training to organizations who are interested in upskilling their in-house engineers to better manage their public key infrastructures.

Michael Audu

BlueCross BlueShield (Principal Cybersecurity Engineer)

Explore the full range of services offered by Encryption Consulting.

Feel free to schedule a demo to gain a comprehensive understanding of all the services Encryption Consulting provides.

Request a demo