Masterclass Public Key Infrastructure Management

Network administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security, Chief Security Officers.

At the end of the course you will be able to:

• Understand the core essence of PKI and cryptography.
• Evaluate and select appropriate PKI technologies.
• Install and configure PKI environments according to the best practices taken from practical experience.
• Secure existing PKI infrastructure.
• Choose appropriate types and manage the certificate lifecycle.
• Understand the benefits of certificates used in the infrastructure.
• Adjust PKI to your business needs.
• Become familiar with enterprise solutions that uses PKI and certificates for security.
• Configure and use certificates in: IIS, VPN, Wi-Fi, file encryption, e-mail security and many more.

Module 1: Essence of PKI

• Cryptography basics
• Fundamentals of PKI
• Certificate types (﴾X.509)﴿
• Certification authorities
• Certificate Revocation Lists

Module 2: Designing and Implement CA Heirachy

• Planning
• Preparing AD Environment
• Securing CA Heirarchy
• Role Separation
• Security Policy

Module 3: PKI in Windows domain

• Managing PKI
• Configure Certificate Templates
• Configure Certificate Enrollment
• Configuring Key Archival and Recovery
• Configuring Trust Between Organizations

Module 4: Upgrading PKI Infrastructure

• Supported Scenarios
• Upgrading Certificate Templates
• Migration Scenarios

Module 5: PKI Security

• Deploying certificates to Domain Controllers
• Certificate Revocation
• Certificate Validation
• CDP, AIA and OSCP
• Planning and implementing disaster recovery
• Deploying smart cards
• TPM Virtual Smartcard
• Private Key security with HSM

Module 6: Securing Applications with PKI

• Secure IIS Traffic with SSL
• IIS certificate store security
• IIS User authentication
• Windows logon with Smart Cards
• Email security
• Encrypting file system
• EDocument and code signing

Module 7: PKI for Network Security

• VPN
• Wireless Networking
• 802.1X and NPS
• Radius Server
• Ipsec
• Mobile devices certificates with MDM, SCEP and NDE

All exercises are based on Windows Server 2016 and 2019, Windows 10 and Kali Linux. This course is based on practical knowledge from tons of successful projects, many years of real-world experience and no mercy for misconfigurations or insecure solutions! Remember that the labs will stay online for an extra three weeks so you may practice even more after the training is completed!

Enterprise administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security.

To attend this training, you should have a good hands-on experience in administering Windows infrastructure. At least 8 years in the field is recommended.

After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible for CPE points!