Windows Server 2019: Active Directory Certificate Services

Learn how to use Active Directory Certificate Services (AD CS) to verify identity, encrypt communication, and establish trust across a Windows network.

Introduction

• Extablishing trust with certificates
• Things you should know

1. Certificates and Trust

• The purpose of a certificate
• Trusted certificate authorities
• Anatomy of a certificate
• Security properties of certificates

2. Public Key Infrastructure

• The hierarchy of AD CS
• Installing certificate services
• Configuring a root authority
• Configuring subordinate authorities
• Backup and recovery of AD CS
• Trusting your root CA

3. Managing Certificate Templates

• Built-in vs. custom templates
• Creating templates for AD
• Security of a certificate template
• Publishing certificate templates

4. Managing Issued Certificates

• GPO for issuing certificates
• Manual certificate enrollment
• Using enrollment agents
• Installing a Web enrollment server
• Using a web enrollment server
• Managing CRL distribution points
• Using online responders
• Configuring online responders

Conclusion

• Next steps