Public Key Infrastructure (PKI) is a core service that facilitates authentication, encryption, and digital signing. This course equips learners with the essential skills to design, operate, and maintain PKI. The training begins with an overview of cryptography and the working principals of algorithms. After establishing an understanding of certificates, it discusses considerations for designing a highly reliable Certification Authority structure and showcases useful tools and resources.
Practical implementation examples are given in both Windows and Linux (for 4-day version) environments. Use-cases show how PKI can be used for, among others:
An ideal candidate will be a systems administrator, network administrator, or hold a similar role.
Delegates should have basic knowledge of Windows Server administration and networking.
Introduction to Cryptography
Usage Scenarios
Components of PKI
Algorithms, Protocols and Standards
Understanding Certificates
Using External CAs
Self-signed Certificates
CA Hierarchy
Writing the Certificate Policy and Certification Practice Statement
Windows Server Certificate Security
OpenSSL on Linux (optional)
Maintaining a CA
Certificate Revocation
Cloud certificate management using Azure Key Vault (optional)
SSL for Web Server
Authentication
Encrypting File System (EFS)
Securing E-Mail
Code Signing
Other PKI-Enable Applications
Best Practices and Compliance
Blockchain
Post-quantum Cryptography
