Microsoft Active Directory Certificate Services training

Building expertise with certificate services

The ability to design and manage a public key infrastructure (PKI) is highly dependent on the skills and knowledge of those managing it. PKI Solutions training focuses on building knowledge and skills with all features of Microsoft Active Directory Certificate Services (ADCS). There is a strong emphasis on security, best practices and hands-on skills labs. All of the classes that are available are the most up-to-date PKI training available for Windows Server 2012 R2 - Windows Server 2019

2020 Training Course Availability - Live Classroom Courses

Open-enrollment workshops provide flexibility for customers needing only a few individuals trained. Don’t see a class near you? Contact us to let us know you are interested and if we get enough interest, we will try to schedule a class!


NOTE: Due to the current Corona Virus travel advisories and corporate travel restrictions for many students, our live, open-enrollment courses have been cancelled. We are still offering our online, self-paced training as well as planning future private onsite deliveries for later in the year.

Microsoft PKI In-depthPortland, OregonApril 20 - 24, 2020N/ACANCELLED
Advanced Microsoft PKIPortland, OregonJune 1 - 5, 2020N/ACANCELLED
Microsoft PKI In-depthWashington, DCAugust 24 - 28, 2020N/ACANCELLED

Online Self-Paced Courses

These courses are delivered electronically in a self-paced, online environment. You will receive access to download the student materials, lab manual and supporting materials. The courses feature video, audio and slide based content. They also cover all of the same topics, lessons and labs as our in person courses.

We will be launching the availability of the PKI In-depth class initially and plan to bring the other courses online later in the year.

We offer group and corporate-wide subscription based enrollment options for our online courses. Offering on-going access to training on demand, for a set number of seats per year. Send us a note or give us a call to inquire about these group rates.

Microsoft PKI In-depth$2,995Register
Advanced Microsoft PKI$2,995Pre-Register
Introduction to PKI, Certificates and KeysCOMING Q3 2020

Training courses offered

Microsoft PKI In-depth

This course covers PKI fundamentals and concepts all the way through a deep-dive into PKI and certificate services by focusing on building knowledge and skills with all of its features. There is a strong emphasis on security, best practices and hands-on skills labs. Whether you are new to PKI or already manage an existing PKI, you will find this class can fill in the missing blanks in your expertise.


Syllabus: Available here for download

Advanced Microsoft PKI

This advanced PKI class focuses on hand-on labs and topics that build on existing Microsoft certificate services and PKI knowledge of the student. Students will spend the majority of the class working on real-life scenarios in the lab ranging from deploying enrollment services, hacking OCSP for near real-time revocation checking, CA migrations, SHA1 to SHA2 migrations, disaster recovery scenarios, certificate reporting and CA database management. The course also covers code signing, key-pair file management and restricted certificate enrollment agents.

Class audience: INTERMEDIATE and ADVANCED. Attending the PKI In-depth course first is recommended, but is not required

Syllabus: Available here for download

Securing Microsoft ADCS with Thales nCipher hardware security modules

This course focuses on deploying Thales nCipher HSMs to secure ADCS. It focuses on the three signing roles available with ADCS — certificate authorities, OCSP responders and NDES enrollment servers. There is a strong emphasis on security, operational controls, availability and hands-on skills labs. The course is designed for Windows Server 2012 R2 and Windows Server 2016. This course is only offered onsite at your organization and can be coordinated to be delivered in conjunction with a Thales nCSE training course.

Class audience: This course is recommended for architects, support engineers and administrators that want to protect their ADCS signing keys with a Thales HSM product.

Syllabus: Available here for download

Availability: Onsite delivery at your organization. Contact us for details.

Introduction to certificates and keys for Windows and Linux systems

This comprehensive in-person, hands-on training class introduces the concepts and practical functionality of x.509 certificates.  It is targeted at those with limited or no certificate knowledge and is ideal for people who need to quickly get up to speed on certificates or fill in gaps in their existing certificate knowledge. The class provides an extensive description of how PKI works and the practical knowledge that developers and IT staff can apply in their current and future careers.

Class audience: NOVICE

Availability: Onsite delivery at your organization. Contact us for details.

Payment details & discounts

We accept payment by corporate purchase orders, credit cards or company check. All prices listed are in U.S. Dollars. Group discounts are available where noted and provide a 10% discount to organizations sending three or more students to the same session.

Certificate of completion

Every student that attends and completes the full week of training will receive a certificate of completion. The certificate is perfect for framing or providing as proof of course completion towards professional advancement goals. In addition, the courses qualify for ISC2 continuing education credit for annual CPE commitments.


Paul Dale

Professional Services Consultant, TITUS

"Mark's PKI courses on MSFT ADCS are by far and away the very, very best on the market! I've never met anybody who knows more than he does around the technology, and I simply cannot recommend him highly enough!"

Charlie Kawasaki

CISSP, Software Diligence Services, and chief technical officer, PacStar

“It’s a real treat and privilege to attend, I’m learning a ton, and it’s directly related to the work I do.  The labs so far have been amazing. You are a master presenter, and an obvious master of the subject matter, which also makes it enjoyable.”

William H. Knight

Sr. Systems Administrator, Deloitte

“The class was excellent. The content was useful, detailed and as advanced as I was hoping it'd be. The hands-on labs were very well thought out, easy to understand and effectively linked the course content and lecture to actual implementation."

LV McCoy

Cryptographic Management & Operations Subject Matter Expert

"The training allowed me to deepen my understanding of ADCS and boost my confidence as the PKI administrator for my enterprise. Great company and training! By far the best in the market."

Lourdes Herling

Cyber Security Analyst, Nebraska Public Power District

“The class definitely exceeded my expectations. My PKI knowledge has grown substantially. I plan on applying several of the concepts to our internal PKI. I will be recommending your courses to anyone who needs to increase their PKI knowledge.”

Matt Walker

IT Manager, Stronghold Ltd.

"My PKI re-deployment definitely wouldn't have been successful without the knowledge and tools I gained this week. Your class should definitely be required for anyone attempting ADCS."

Lupe Q. Meza

Security Operations, Sempra Energy Utilities

"I truly appreciated the class! The course was highly informative and well presented. I value your knowledge, guidance, and professionalism."

Mike Gantert

Senior Information Security Analyst, Country Financial Security Services

“I definitely walked away feeling empowered with knowledge.”