2821 Deploying And Managing a Public Key Infrastructure en Tijuana

Lesson 1: Overview of Public Key Infrastructure

• Introduction to PKI

• Introduction to Cryptography

• Certificates and Certification Authorities

Lesson 2: Designing a Certification Authority Hierarchy

• Identifying CA Hierarchy Design Requirements

• Common CA Hierarchy Designs

• Documenting Legal Requirements

• Analyzing Design Requirements

• Designing a CA Hierarchy Structure

Lesson 3: Creating a Certification Authority Hierarchy

• Creating an Offline CA

• Validating Certificates

• Planning CRL Publication

• Installing a Subordinate CA

Lesson 4: Managing a Public Key Infrastructure

• Introduction to PKI Management

• Managing Certificates

• Managing Certification Authorities

• Planning for Disaster Recovery

Lesson 5: Configuring Certificate Templates

• Introduction to Certificate Templates

• Designing and Creating a Certificate Template

• Publishing a Certificate Template

• Managing Changes in a Certificate Template

Lesson 6: Configuring Certificate Enrollment

• Introduction to Certificate Enrollment

• Enrolling Certificates Manually

• Autoenrolling Certificates

Lesson 7: Configuring Key Archival and Recovery

• Introduction to Key Archival and Recovery

• Implementing Manual Key Archival and Recovery

• Implementing Automatic Key Archival and Recovery

Lesson 8: Configuring Trust Between Organizations

• Introduction to Advanced PKI Hierarchies

• Qualified Subordination Concepts

• Configuring Constraints in a Policy.inf File

• Implementing Qualified Subordination

Lesson 9: Deploying Smart Cards

• Introduction to Smart Cards

• Enrolling Smart Card Certificates

• Deploying Smart Cards

Lesson 10: Securing Web Traffic by Using SSL

• Introduction to SSL Security

• Enabling SSL on a Web Server

• Implementing Certificate-based Authentication

Lesson 11: Configuring E-mail Security

• Introduction to E-mail Security

• Configuring Secure E-mail Messages

• Recovering E-mail Private Keys

• Migrating a KMS Database to a CA Running Windows Server 2003