Introduction into Cryptography:
This introduction gives a brief introduction into the most important aspects of cryptography in general, Public Key Infrastructure (PKI) and how Windows deals with certificates and the related standards.
- Introduction into Cryptography
- The X.509 Standard
- Terms and Definitions
- Constrains & Cross Certification
- Integration of PKI into Active Directory
Designing and installing a CA Hierarchy:
This chapter explains in detail how to design and install a CA hierarchy.
- Certification Authority Hierarchies
- Installing an Offline Root CA
- Installing an Online Enterprise Issuing CA
- Backup and Recovery
- Implementing High Availability
Certificate Templates:
This chapter explains the topic of certificate templates in detail.
- Overview
- Certificate Template Versions
- Version 1 Certificate Templates
- Version2 Certificate Templates
- Version3 Certificate Templates
Issuing Certificates:
This chapter explains how the process of certificate enrollment works in detail. All manual and automatic enrollment methods, as well as the process of certificate renewal are covered.
- Windows Certificate Stores
- Protection of Private Keys
- Manual Certificate Enrollment
- Automatic Certificate Enrollment
- Certificate Renewal
Certificate Verification and Revocation:
Certificate verification and revocation is the trickiest part in a PKI project and is therefore covered down to the last detail in this module.
- Authority Information Access (AIA)
- Certificate Revocation Lists (CRLs)
- The Online Certificate Status Protocol (OCSP)
- Certificate Verification and Revocation
- Implementing the OCSP Responder
- Performance and Troubleshooting
CA Management Roles and Private Key Archival:
Security and manageability of a CA infrastructure can be even improved by organizing administrators into separate, predefined CA roles, each with its own set of tasks. This can be achieved by implementing Common Criteria role separation.
Implementing role separation is highly recommended when it comes to private key archival, which allows for creating backups of privates keys for certificates enrolled by a CA, in the CA's database.
Both topics are covered in this module.
- Common Criteria´Role Separation
- Private Key Archival
- Implementing Privale Key Archival