|
SE-420
DEPLOYING A PUBLIC KEY INFRASTRUCTURE ON WINDOWS
1 Day
Tuition: $595
Target Audience:
System Administrators, Security Auditors, IT Managers
Prerequisites:
-
Intermediate or Advanced Network and
Systems Admin experience
-
Network Intrusion Protection course
-
Cryptography Theory course
As a result of completing this course, the
student will be able to:
·
Deploy and
Configure a Windows-based Certificate Authority
·
Issue and
Manage Certificates
·
Implement an
SSL-based Website
·
Enabling
Outlook for Encrypted Email
Student Materials:
-
Binder of printed overheads & labs
-
Reference Book: Microsoft Windows Server
2003 PKI and Certificate Security (Microsoft Press) or Planning for PKI:
Best Practices Guide for Deploying Public Key Infrastructure (Wiley)
PKI Overview
-
Uses of a
PKI
-
PKI Components
-
Certificate Authority Hierarchy
-
Components of a Certificate
-
Commercial Certification Authorities
Deploying a PKI
using Windows Certificate Services
·
CA Root
Installation
·
Self-Signed Root
Certificate
·
Trusting the Root
CA Certificate on Clients
·
Installing
Subordinate/Issuing CAs
Managing
Certificates
·
Applying for a
Certificate
·
Issuing
Certificates Automatically vs. Manually
·
Revoking
Certificates
·
Renewing
Certificates
·
Publishing the CRL
Implementing an
SSL-based Website
·
Public vs. Private
Certificates
·
SSL Configuration
·
Attacks on SSL
websites
Enabling Outlook
for Encrypted Email
·
Limitations of
Encrypted Email
·
Digitally-Signed
Email
·
Encrypted Email
Summary List of Lab Exercises/Tools:
·
Certificate
Authority Creation
·
Certificate
Issuance
·
Encrypted
Webserver Communication
·
Configuring and
Testing Encrypted Email |
