Microsoft PKI In-depth Training


PKI Solutions In-depth 5-day hands-on training

SKU: PKI001 Category:


The ability to design and manage a Public Key Infrastructure (PKI) is highly dependent on the skills and knowledge of those managing it. This course is a deep-dive into PKI and Active Directory Certificate Services (ADCS) by focusing on building knowledge and skills with all of its features. There is a strong emphasis on security, best practices, and hands-on skills labs.

Class audience: This course is recommended for anyone using, managing, deploying or designing PKI solutions with ADCS components.

Course details: Download here.


Class syllabus

Certificates & Certificate Stores

  • Digital Certificates
  • Keypairs
  • Windows Certificate Stores

Certification Authorities (CA) and Hierarchies

  • Certification Authorities
  • Trusted Root Certificates
  • PKI Definition Documents

Crypto Service Providers, Algorithms, and Keys

  • CSP overview
  • Crypto Next Generation
  • Suite-B compatibility
  • Cryptographic Functions
    • Encryption Types
    • Hashing
    • Cryptographic Keys
    • Key Types
    • Key Lengths

Certificate Revocation Lists

  • Base and Delta CRL Overview
  • CRL Overlap
  • Design Principles

LAB 1: Deploy a 2-tier PKI

Certificate Validation

  • Chain Building
  • Revocation checking
  • Troubleshooting Tools and Techniques

Online Certificate Status Protocol

  • Overview
  • OCSP Process
  • Limitations
  • Design Configurations
  • Weaknesses

Lab 2: Deploy an OCSP Responder

Enterprise Templates

  • Overview
  • Template Schema Versions
  • Template Properties
  • Template Configuration Versioning

Certificate Enrollment

  • Enrollment Overview
  • Certificate Authority Web Enrollment (CAWE)
  • Cross Forest Enrollment

Automated Certificate Enrollment

  • Certificate Autoenrollment Overview
  • Group Policy Settings
  • Autoenrollment Processes
  • Troubleshooting

Certificate Enrollment Web Services (CES/CEP)

  • Overview
  • Infrastructure Requirements
  • Installation & Configuration
  • Troubleshooting

LAB 3: Deploy CES/CEP

Renewing, Upgrading and Migrating CAs

  • CA Renewals
  • OS Upgrades
  • Migration Scenarios
  • Migration Process

High Availability

Disaster Recovery

Cloud PKI Architecture

What’s New in 2016

Common ADCS Mistakes

ADCS Known Issues

Troubleshooting CA Issues

ADCS Debug Logs

ADCS Configuration


Training Location

Training is conducted at the PKI Solutions HQ office located in Portland Oregon.

Training Space

Portland Oregon

5331 S. Macadam Ave, Suite 330
Portland, Oregon 97239

9 reviews for Microsoft PKI In-depth Training

  1. Charlie Kawasaki, CISSP, Software Diligence Services, and chief technical officer, PacStar

    “It’s a real treat and privilege to attend, I’m learning a ton, and it’s directly related to the work I do. The labs so far have been amazing. You are a master presenter, and an obvious master of the subject matter, which also makes it enjoyable.”

  2. Paul Dale, Professional Services Consultant, TITUS

    “Mark’s PKI courses on MSFT ADCS are by far and away the very, very best on the market! I’ve never met anybody who knows more than he does around the technology, but more so he has a truly outstanding knowledge of the subject as a whole. A true superluminary of the field in my opinion. He has a natural talent for teaching and makes it a real pleasure to be in his classes. If you or your team want to know more about PKI—even if you think you know it very well already, then this is a guy who will help you drive your knowledge even further and I simply cannot recommend him highly enough!”

  3. Tony Ventura, M.A., CISSP, IT management professional, Peel Regional Police

    “We recently hired [PKI Solutions] to deliver a PKI training class to 12 of my engineers. All the feedback from the class was extremely positive. It was very clear to my staff that Mark’s PKI knowledge was second to none. One of my engineers who told me the training was ‘the best of the best’.”

  4. Adam Berns, IT Systems Architect, Aruba Networks

    “I recently took the PKI Class that Mark Cooper offers. It was incredibly well done. I learned so much about how PKI works, how to set it up, manage it. If you need some PKI help, or training, you should really check out his class at PKI Solutions Inc. or his consulting services.”

  5. LV McCoy, Cryptographic Management & Operations Subject Matter Expert

    “The training allowed me to deepen my understanding of ADCS and boost my confidence as the PKI administrator for my enterprise. Great company and training! By far the best in the market.”

  6. Chris Parson, Senior Systems Administrator, Midcontinent ISO

    “This was a great class on PKI. I learned a lot from it. Mark does an awesome job at explaining the content and provides insight from his experience when he worked for Microsoft.”

  7. Mark Steffen, Senior Security Engineer, PCC

    “Mark has a great presentation style and the labs are fantastic. Couldn’t recommend his training enough for a company looking to deploy or re-implement PKI.”

  8. Jim Bjurefeldt, Technical Specialist, Verisec

    “One of the best trainings I ever attended!”

  9. Gary Green, principal cloud identity and encryption engineer, SAIC

    “Best training ever! Mark Cooper does a great job with this training. The course and labs are well designed. In a week he delivers many years of experience to you.”

Only logged in customers who have purchased this product may leave a review.

Scroll To Top