Self-Paced Microsoft PKI In-depth Online Training


The ability to design and manage a Public Key Infrastructure (PKI) is highly dependent on the skills and knowledge of those managing it. This course is a deep-dive into PKI and Active Directory Certificate Services (ADCS) by focusing on building knowledge and skills with all of its features. There is a strong emphasis on security, best practices, and hands-on skills labs.

SKU: PKI011 Categories: ,


We offer group and corporate-wide subscription based enrollment options for our online courses. Offering on-going access to training on demand, for a set number of seats per year. Details available here.

Featuring over 13 hours of instructional video content plus 3 interactive labs.

This course will be delivered electronically in a self-paced environment. You will receive access to download the student materials, lab manual and supporting materials. The course will feature video, audio and slide based content. It will cover all of the same topics and lessons as our in-person courses.

The ability to design and manage a Public Key Infrastructure (PKI) is highly dependent on the skills and knowledge of those managing it. This course is a deep-dive into PKI and Active Directory Certificate Services (ADCS) by focusing on building knowledge and skills with all of its features. There is a strong emphasis on security, best practices, and hands-on skills labs.

Once enrolled, you will have unlimited access to the course material for 90 days to complete at your own pace. Corporate subscriptions are not time-limited.

Target audience: This course is recommended for anyone using, managing, deploying or designing a Public Key Infrastructure with Microsoft Active Directory Certificate Services.


Course details: Download here.

Class syllabus

Certificates & Certificate Stores

  • Digital Certificates
  • Keypairs
  • Windows Certificate Stores

Certification Authorities (CA) and Hierarchies

  • Certification Authorities
  • Trusted Root Certificates
  • PKI Definition Documents

Crypto Service Providers, Algorithms, and Keys

  • CSP overview
  • Crypto Next Generation
  • Suite-B compatibility
  • Cryptographic Functions
    • Encryption Types
    • Hashing
    • Cryptographic Keys
    • Key Types
    • Key Lengths

Certificate Revocation Lists

  • Base and Delta CRL Overview
  • CRL Overlap
  • Design Principles

LAB 1: Deploy a 2-tier PKI

Certificate Validation

  • Chain Building
  • Revocation checking
  • Troubleshooting Tools and Techniques

Online Certificate Status Protocol

  • Overview
  • OCSP Process
  • Limitations
  • Design Configurations
  • Weaknesses

Lab 2: Deploy an OCSP Responder


Enterprise Templates

  • Overview
  • Template Schema Versions
  • Template Properties
  • Template Configuration Versioning

Certificate Enrollment

  • Enrollment Overview
  • Certificate Authority Web Enrollment (CAWE)
  • Cross Forest Enrollment

Automated Certificate Enrollment

  • Certificate Autoenrollment Overview
  • Group Policy Settings
  • Autoenrollment Processes
  • Troubleshooting

Certificate Enrollment Web Services (CES/CEP)

  • Overview
  • Infrastructure Requirements
  • Installation & Configuration
  • Troubleshooting

LAB 3: Deploy CES/CEP

Renewing, Upgrading and Migrating CAs

  • CA Renewals
  • OS Upgrades
  • Migration Scenarios
  • Migration Process

High Availability

Disaster Recovery

Cloud PKI Architecture

What’s New in 2016

Common ADCS Mistakes

ADCS Known Issues

Troubleshooting CA Issues

ADCS Debug Logs

ADCS Configuration


19 reviews for Self-Paced Microsoft PKI In-depth Online Training

  1. Charlie Kawasaki, CISSP, Software Diligence Services, and chief technical officer, PacStar

    “It’s a real treat and privilege to attend, I’m learning a ton, and it’s directly related to the work I do. The labs so far have been amazing. You are a master presenter, and an obvious master of the subject matter, which also makes it enjoyable.”

  2. David Machula, Information Technology Specialist 2, New York State Teachers’ Retirement System

    “In general, ADCS is one of the more complex Microsoft technologies to implement and while the initial setup can be challenging enough, the real test is how well it continues to function for the duration of its existence. With that in mind, I would definitely recommend the course to anyone intending to use PKI in their environment or to offer services in PKI consulting.”

  3. Stephen Yannantuono, Senior Principal Systems Engineer, Global Identity Management

    “Thanks again for the training, I really have to say you do an awesome job! I’ve told everyone here if we hire anyone and they need a PKI training that you’re THE guy to go to.”

  4. Lupe Q. Meza, Security Operations, Sempra Energy Utilities

    “I truly appreciated the class! The course was highly informative and well presented. I value your knowledge, guidance and professionalism.”

  5. Manish Patel, Principal Professional Services Consultant, Gemalto

    “The class was very informative and the labs especially useful. I have strongly recommended the class to others.”

  6. Raj Nagalingam, CISSP, Partner Solution Architect, LinkedIn

    “The course was excellent and enjoyed learning a lot from your class.”

  7. Pierre-Luc Brunet, Senior Advisor, Cyber Security and Information Security at Yellow Pages/ Pages Jaunes Canada

    “I can assure you that the training was worth every penny. Mark’s class material is well done and it’s clear that he is not only very knowledgeable but also very passionate about anything related to ADCS.”

  8. Mike Gantert, Senior Information Security Analyst, Country Financial Security Services

    “I definitely walked away feeling empowered with knowledge.”

  9. Matt Walker, IT Manager, Stronghold Ltd.

    “I had a little exposure to ADCS before I came, but didn’t realize how much I didn’t know or wouldn’t have known if I relied solely on information in the community. My PKI re-deployment definitely wouldn’t have been successful without the knowledge And tools I gained this week. Your class should definitely be required for anyone attempting ADCS.”

  10. Benjamin Kwok, principal system administrator, Marvell Semiconductor

    “I was so amazed you could answer all the questions in class! This is the very first class I didn’t hear ‘this is not in the topic’ or ‘let me get back to you later!’ You have helped give me a much better understanding of PKI.”

  11. Tony Ventura, M.A., CISSP, IT management professional, Peel Regional Police

    “We recently hired [PKI Solutions] to deliver a PKI training class to 12 of my engineers. All the feedback from the class was extremely positive. It was very clear to my staff that Mark’s PKI knowledge was second to none. One of my engineers who told me the training was ‘the best of the best’.”

  12. Paul Dale, Professional Services Consultant, TITUS

    “Mark’s PKI courses on MSFT ADCS are by far and away the very, very best on the market! I’ve never met anybody who knows more than he does around the technology, but more so he has a truly outstanding knowledge of the subject as a whole. A true superluminary of the field in my opinion. He has a natural talent for teaching and makes it a real pleasure to be in his classes. If you or your team want to know more about PKI—even if you think you know it very well already, then this is a guy who will help you drive your knowledge even further and I simply cannot recommend him highly enough!”

  13. Darren Davis, Technical Consultant Directory Services, Santander Technology

    “Well worth attending. Mark changed my outlook on PKI.”

  14. LV McCoy, Cryptographic Management & Operations Subject Matter Expert

    “The training allowed me to deepen my understanding of ADCS and boost my confidence as the PKI administrator for my enterprise. Great company and training! By far the best in the market.”

  15. Adam Berns, IT Systems Architect, Aruba Networks

    “I recently took the PKI Class that Mark Cooper offers. It was incredibly well done. I learned so much about how PKI works, how to set it up, manage it. If you need some PKI help, or training, you should really check out his class at PKI Solutions Inc. or his consulting services.”

  16. Jim Bjurefeldt, Technical Specialist, Verisec

    “One of the best trainings I ever attended!”

  17. Mark Steffen, Senior Security Engineer, PCC

    “Mark has a great presentation style and the labs are fantastic. Couldn’t recommend his training enough for a company looking to deploy or re-implement PKI.”

  18. Chris Parson, Senior Systems Administrator, Midcontinent ISO

    “This was a great class on PKI. I learned a lot from it. Mark does an awesome job at explaining the content and provides insight from his experience when he worked for Microsoft.”

  19. Gary Green, principal cloud identity and encryption engineer, SAIC

    “Best training ever! Mark Cooper does a great job with this training. The course and labs are well designed. In a week he delivers many years of experience to you.”

Only logged in customers who have purchased this product may leave a review.

You may also like…