Pro Active Directory Certificate Services

Chapter 1-01 - Basic Cryptography - Symmetric Key Encryption
Intro to cryptography Symmetric Key vs Asymmetric Key Encryption Key Management Symmetric Key Encryption (Secret Key) Key Management with just Symmetric Key Common Symmetric Key Algorithms Strength of Symmetric Key Algorithms based on Key Length Encryption Modes Examples
Chapter 1-02 - Basic Cryptography - Message Digest
Intro to message digests Characteristics of a Good Message Digest Algorithm Conception representations Primary uses
Chapter 1-03 - Basic Cryptography - Asymmetric Key Encryption
Intro to Asymmetric Key (public/private key) How Asymmetric Key Cryptography Works Common Asymmetric Key Algorithms Conceptual Model Algorithm Performance Demo of Crypto Challenge Mechanism
Chapter 1-04 - Digital Signature and Digital Envelope
Basic concepts for Digital Signatures Creating a Digital Signature Validating a Digital Signature Basic concepts for Digital Envelopes Creating a Digital Envelope Opening a Digital Envelope
Chapter 1-05 - Digital Certificates
X.509 standard, PKIX (Public Key Infrastructure for X.509) RFCs Details of X.509 certificates Server Certificates Client Certificates S/MIME Certificates Windows Login Certificates Validation of Certificates Certificate Lifetime Management Certificate Revocation (CRL, OCSP)
Chapter 1-06 - Public Key Infrastructure
Creating and Managing Digital Certificates Requirements for a Secure Network Protecting the CA private keys in an HSM Certificate Hierarchies - public and private Ways to access a Certification Authority Installing CA certificates on relying nodes
Chapter 1-07 - Certificate Revocation and Renewal
The Need for Certificate Revocation Comparison with Credit Card Revocation Certificate Revocation Lists (CRLs) Open Certificate Status Protocol (OCSP) Publishing CRLs via HTTP and LDAP Running an OCSP Server
Chapter 1-08 - Key Management
Managing Symmetric Keys Managing Asymmetric Public Keys Managing Asymmetric Private Keys Key Backup and Recovery Key Escrow Building and Publishing a Shared Address Book with Certificates with Active Directory
Chapter 1-09 - Public Key Infrastructure
Putting All of the Above Pieces Together Security Requirements for a PKI Deploying and Running a PKI Providing Secure Access to a PKI
Chapter 1-10 - SSL and TLS
TLS (Transport Layer Security) - the New Name for Secure Socket Layer (SSL) Standards (TLS v1.2, TLS v1.3) Deploying a Secure TLS Server (e.g. HTTPS, SMTPS, IMAPS, LDAPS, FTPS) Strong Client Authentication in TLS with a Client Certificate Issues with TLS in Multi-link Systems (e.g. E-mail, FTP)
Chapter 1-11 - S/MIME Secure E-mail
Multipurpose Internet Mail Extensions (MIME) Secure MIME (S/MIME) Comparison with TLS - How it Complements S/MIME, not competes with it Adding Digital Signatures and Digital Envelopes in Internet E-mail Certificate issues with S/MIME Access to Recipient Certificates for Encrypted Messages Deploying S/MIME Automated S/MIME Certificate Management Automated Creation of a Shared Address Book in Active Directory Private Key Escrow
Chapter 1-12 - Cryptographic Authentication
Comparison with Username/Password Authentication Two Factor Authentication (2FA) Using Digital Certificates for Cryptographic Authentication How Crypto Challenge Works in TLS Embedding Crypto Challenge in Cell-Phone Based Push Notification
Chapter 2-01 - Microsoft Certificate Services
What Certificate Services Is and How it Works Integration with Windows Server 2019 and Active Directory Using mmc.exe to request Certificates Deploying Certificate Services
Chapter 2-02 - Issue and Manage TLS Server Certificates
Contents of a TLS Server Certificate Creating Certificate Template for TLS Server Certificates Preparing to Issue TLS Sever Certificates Using mmc.exe to request a TLS Server Certificate Installing a TLS Server Certificate to Enable HTTPS in IIS Testing HTTPS in IIS
Chapter 2-03 - Issue and Manage TLS Client Certificates
Contents of a TLS Client Certificate Creating Certificate Template for TLS Client Certificates Preparing to Issue TLS Client Certificates Using mmc.exe to request a TLS Client Certificate Installing a TLS Client Certificate for Strong Client Authentication Against IIS Testing Strong Client Authentication in IIS
Chapter 2-04 - Issue and Manage S/MIME Certificates
Contents of a S/MIME Certificate Creating Certificate Template for S/MIME Certificates Preparing to Issue S/MIME Certificates Using mmc.exe to request an S/MIME Certificate Installing an S/MIME Certificate in Outlook Adding Digital Signature to Internet E-mail Adding Digital Envelope to Internet E-mail Obtaining Recipient Certificates from Active Directory
Chapter 2-05 - Cryptographic Authentication to Windows Computers
Windows Smartcard Login Contents of a Windows Login Certificate Creating Certificate Template for Windows Login Certificates Preparing to Issue Windows Login Certificates Using mmc.exe to request a Windows Login Certificate Replacing Username/Password Windows Login with Smartcard Login Windows Hello