QCecuring - Enterprise Security Solutions

PKI Fundamentals & Enterprise Deployment

Design and deploy a fully operational enterprise PKI from scratch. From cryptographic fundamentals through hands-on deployment of a 2-tier Microsoft ADCS hierarchy. Each participant builds their own working PKI in a dedicated cloud lab environment.

3 Days (21 hours) Instructor-Led, Live Virtual Intermediate $1,600 per participant (minimum 3)

What You'll Learn

Day 1 - PKI Fundamentals & Architecture Design

Morning

Public/private key cryptography
Symmetric vs asymmetric encryption
X.509 certificate structure
Certificate lifecycle and trust chains
Real-world use cases (TLS, VPN, device auth, code signing)

Afternoon

1-Tier, 2-Tier, and 3-Tier hierarchy models
Offline Root CA concept
Microsoft ADCS components and CA types
Certificate templates overview
CRL and AIA distribution points planning

Day 2 - Building Enterprise PKI (Hands-On)

Morning

Domain Controller & AD DS setup (Demo + Lab)
Root CA deployment (Standalone, RSA 4096, 20-year)
Publish Root certificate to Active Directory
Participants deploy their own Root CA

Afternoon

Enterprise Subordinate CA installation
CSR generation, Root CA signing
CRL and AIA distribution point configuration
End-to-end trust chain verification
Taking Root CA offline + recovery documentation

Day 3 - Operations, Security & Troubleshooting

Morning

Custom certificate templates (Web Server, User, Workstation)
Auto-enrollment via Group Policy
Certificate renewal and revocation
OCSP responder overview

Afternoon

CA role separation, auditing, key protection
HSM overview and FIPS compliance
CA database backup and restoration
Diagnostic tools: certutil, pkiview.msc, CAPI2 logs
Break/fix exercises (instructor introduces faults)

Lab Environment

Infrastructure

Dedicated cloud lab per participant (AWS/Azure)

VMs / Resources

3x Windows Server (Domain Controller, Root CA, Issuing CA)

Access

Remote Desktop (RDP)

Post-Training

48 hours additional access for practice

What's Included

3 days live instructor-led training
Dedicated cloud lab per participant
Step-by-step lab manuals (keep forever)
Presentation slides and reference material
PKI configuration templates and scripts
Troubleshooting cheat sheet
Post-training email support (2 weeks)
Certificate of Completion

Who Should Attend

Security engineers, PKI administrators, infrastructure architects, systems administrators, IT managers

Prerequisites

Basic networking (DNS, IP, AD concepts), familiarity with Windows Server administration, general awareness of encryption/certificates

Training Investment

Participants Per Person Total
3 $1,600 $4,800
5 $1,600 $8,000
8 $1,600 $12,800
10 $1,600 $16,000
15+ $1,500 $22,500

Bundle discount: Book with Certificate Lifecycle Management (2 days) for $2,400/person total (save $300).

On-site delivery available at additional cost (travel + accommodation).

Ready to Enroll?

Contact us to schedule training for your team. We offer flexible scheduling and can customize the curriculum to your environment.

Stay ahead on cryptography & PKI

Get monthly insights on certificate management, post-quantum readiness, and enterprise security. No spam.

We respect your privacy. Unsubscribe anytime.