Deploying and Managing a Public Key Infrastructure

QuickStart Intelligence
Brea, Irvine, Los Angeles, San Francisco, San Jose, Woodland Hills, California, United States

Course Format: Classroom | E-learning | Virtual Class | Online | On-site | Blended | Self-paced

Course Description:

'' This four-day, instructor-led course provides students with the knowledge and skills to design, deploy, and manage a public key infrastructure (PKI) to support applications that require distributed security. Students get hands-on experience implementing solutions to secure PKI-enabled applications and services, such as Microsoft Internet Explorer, Microsoft Exchange Server, Microsoft Internet Information Server, Microsoft Outlook, and remote access services.

Audience

This course is intended for IT systems engineers who are responsible for designing and implementing security solutions. Individuals should have knowledge and experience to install and configure the Active Directory directory service and security mechanisms for computers running Microsoft Windows 2000 Server or Windows Server�2003 family.

At Course Completion

After completing this course, students will be able to:

�Describe PKI and the major components of a PKI.
�Design a certification authority (CA) hierarchy to meet business requirements.
�Install Certificate Services to create a CA hierarchy.
�Perform certificate management tasks, CA management tasks, and plan for disaster recovery of Certificate Services.
�Create and publish a certificate template, and replace an existing certificate template.
�Enroll a certificate manually, autoenroll a certificate, and enroll a smart card certificate.
�Implement manual and automatic key archival and recovery in a Windows Server 2003 PKI.
�Configure trust between organizations by configuring and implementing qualified subordination.
�Deploy smart cards in a Windows environment.
�Secure a Web environment by implementing SSL security and certificate-based authentication for Web applications.
�Implement secure e-mail messages by using Microsoft Exchange Server in a Windows 2000 or Windows 2003 environment.

Prerequisites

Before attending this course, students must have:

�Familiarity with Windows 2000 or Windows Server 2003 core technologies, such as those described in the following Microsoft Official Curriculum (MOC) courses:
�Course 2274: Managing a Microsoft Windows Server 2003 Environment
�Course 2275: Maintaining a Microsoft Windows Server 2003 Environment
�Course 2152: Implementing Microsoft Windows 2000 Professional and Server
�Familiarity with Windows 2000 or Windows 2003 networking technologies, such as those described in the following MOC courses:
�Course 2277: Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure: Network Services
�Course 2153: Implementing a Microsoft Windows 2000 Network Infrastructure
�Familiarity with Windows 2000 or Windows 2003 directory services technologies, such as those described in the following MOC courses:
�Course 2279: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure
�Course 2154: Implementing and Administering Microsoft Windows 2000 Directory Services

Microsoft Certified Professional Exams

This course will help the student prepare for the following Microsoft Certified Professional exams:

�Exam 70-214: Implementing and Managing Security in a Windows 2000 Network Infrastructure
�Exam 70-220: Designing Security for a Microsoft Windows 2000 Network
�Exam 70-298: Designing Security for a Microsoft Windows Server 2003 Network
�Exam 70-299, Implementing and Administering Security in a Microsoft Windows Server 2003 Network

Course Materials

The student kit includes a comprehensive workbook and other necessary materials for this class.

Course Outline

Module 1: Overview of Public Key Infrastructure

This module explains the basic concepts of a public key infrastructure (PKI) and its components. It also provides an overview of the topics that will be explained in-depth in the course.

Lessons

�Introduction to PKI
�Introduction to Cryptography
�Certificates and Certification Authorities

Lab A: Identifying Trusted Root CAs

�Creating a Custom MMC
�Viewing CA Certificates in Certificates MMC
�Analyzing CA Certificate Distribution Methods

After completing this module, students will be able to:

�Describe PKI and its basic components.
�Describe how symmetric and public key encryption works.
�Define the role of certificates and CAs in a PKI.

Module 2: Designing a Certification Authority Hierarchy

This module introduces students to designing a CA hierarchy. It explains the major tasks that are involved, including identifying business and legal requirements and planning a Certification Authority (CA) hierarchy structure.

Lessons

�Identifying CA Hierarchy Design Requirements
�Common CA Hierarchy Designs
�Documenting Legal Requirements
�Analyzing Design Requirements
�Designing a CA Hierarchy Structure

Lab A: Designing a CA Hierarchy

�Identifying Applications and Certificate Holders
�Identifying Technical and Business Requirements
�Designing a CA Hierarchy

After completing this module, students will be able to:

�Identify technical and business requirements for designing a CA hierarchy.
�Describe common CA hierarchy designs.
�Describe policies and documents for specifying the legal requirements of a CA hierarchy design.
�Identify the impact of design requirements and determine design changes to a CA hierarchy design.
�Design a CA hierarchy to meet business requirements.

Module 3: Creating a Certification Authority Hierarchy

This module explains how to create a CA hierarchy based on a CA hierarchy design. Students also learn how to install Certificate Services, validate a certificate, and publish a certificate revocation list (CRL) and an Authority Information Access (AIA).

Lessons

�Creating an Offline CA
�Validating Certificates
�Planning CRL Publication
�Installing a Subordinate CA

Lab A: Installing an Offline CA

�Configuring CAPolicy.inf for installing the Offline Root CA
�Installing the Offline Root CA

Lab B: Publishing CRLs and AIAs

�Defining CRL and AIA Publication Settings
�Publishing the CRL and AIA Information
�Adding the Web Server to Local Intranet Sites

Lab C: Implementing a Subordinate Enterprise CA

�Installing the Subordinate Enterprise CA
�Validating the PKI Health of your CA Hierarchy

After completing this module, students will be able to:

�Create an offline root CA.
�Design an infrastructure to validate certificates.
�Design an infrastructure to publish CRLs.
�Install a subordinate CA.

Module 4: Managing a Public Key Infrastructure

This module explains how to manage a PKI by managing certificates and CAs. Students also learn how to recover a PKI in the event of a failure.

Lessons

�Introduction to PKI Management
�Managing Certificates
�Managing Certification Authorities
�Planning for Disaster Recovery

Lab A: Enabling Role Separation

�Defining CA Administrators and Certificate Managers
�Restricting Certificate Managers
�Generating Certificate Requests
�Testing CA Administrator Tasks
�Testing Certificate Manager Tasks
�Enabling Certificate Services Auditing

Lab B: Backing Up and Restoring a Certification Authority

�Determining Backup Privileges
�Backing Up Certificate Services
�Removing the CA’s Private Key from the CA Certificate Store
�Restoring the System State Backup

After completing this module, students will be able to:

�Describe the use of roles in PKI manage ...''

Phone:(800) 326-1044

School Address:

San Francisco
33 New Montgomery St., Ste 950
San Francisco, CA 94105
(415) 972-2500

San Jose
2665 North First St., Ste. 214
San Jose, CA 95134
(408) 570-9750

Woodland Hills
20750 Ventura Blvd., Ste 350
Woodland Hills, CA 91364
(818) 676-0100

Los Angeles
5220 Pacific Concourse Dr., Ste 300
Los Angeles, CA 90045
(310) 643-6630

Brea
3040 Saturn St. Ste 106
Brea, CA 92821
(714) 577-7500

Irvine
Corporate Headquarters
16815 Von Karman Avenue, Ste 100
Irvine, CA 92606
(949) 486-1351



Jobs & Resumes: Brea, Irvine, Los Angeles, San Francisco, San Jose, Woodland Hills
Houses & Roommates: Brea, Irvine, Los Angeles, San Francisco, San Jose, Woodland Hills

Microsoft ASP.Net AJAX
Object-Oriented Analysis and UML
XML Boot Camp
Microsoft CRM Sales Management
Microsoft CRM Marketing Automation
Microsoft CRM Service Management
Microsoft CRM Service Scheduling
CRM 3.0 - Install, Configure and Customize
Microsoft Operations Manager 2005
Network Security
Securing Wireless Networks
Systems Management Server 2003
ITIL Essential Foundations Certification Boot camp
ITIL Practitioner Certification Boot Camp
Project 2003
Implementing Cisco MPLS v2.1
Building Cisco Multilayer Switched Networks v3.0 (BCMSN)
Configuring BGP on Cisco Routers v3.2
Building Cisco Remote Access Networks v 2.2

Notice: The course description on this page was captured from the Internet as historical reference or submitted by visitors. It was archived statically and not updated from day to day.
 

Tips: Schools can use this unlimited free web marketing service by submitting their course descriptions and school introductions. Two outbound links will be granted to each posting.