qSkills™ AI Agent

Hello! Ask me about training courses, certifications, schedules or anything else on qskills.de—just in your own words.

0/800

Get in touch:

Your Name *

Your company *

Your email *

Your phone number

Number of participants

Your message

In order to process your request, it is necessary to process the data you provide. This means that by submitting the contact form, you consent to your data being processed (see Privacy Policy). You can object to the processing of your data at any time.*

* All fields marked with an asterisk are mandatory fields.

+49 (911) 80 10 30

Give us a call or have us call you back!

Simply leave a message with your callback appointment

Your Name *

Your phone number *

Callback date *

Callback time *

Your request *

In order to process your request, it is necessary to process the data you provide. This means that by submitting the contact form, you consent to your data being processed (see Privacy Policy). You can object to the processing of your data at any time.

* All fields marked with an asterisk are mandatory fields.
Send a message

Your Name *

Your email *

Your phone number

Your request *

In order to process your request, it is necessary to process the data you provide. This means that by submitting the contact form, you consent to your data being processed (see Privacy Policy). You can object to the processing of your data at any time.*

* All fields marked with an asterisk are mandatory fields.
Social Media

Share page

SC710: PKI management for Microsoft™ Server 2025 and Azure NEW

Training: Microsoft™

The course provides the fundamentals for planning, implementation, and operation of a public key infrastructure (PKI) with Microsoft™ Server 2025 and Azure. Covered are PKI design, installation, and configuration of CA and Sub-CA structures as well as certificate management, automation, and security measures. Additionally, the course provides practical insights into regulatory requirements, cloud and hybrid models, and the protection of cryptographic keys.

Appointment selection

Appointments in English language (0)

					Action
Unfortunately there are currently no available appointments. Would you like to request an appointment? Then click on 'No matching appointment?'

Possible course languages: German

Request prefered appointment period:

Your Name *

Your email *

Your phone number

Preferred period from *

Preferred period to *

Number of participants *

Your message

* All fields marked with an asterisk are mandatory fields.

Unfortunately there are currently no available appointments.
Would you like to request an appointment? Then click on 'No matching appointment?'

Request prefered appointment period:

Your Name *

Your email *

Your phone number

Preferred period from *

Preferred period to *

Number of participants *

Your message

* All fields marked with an asterisk are mandatory fields.

Agenda:

Fundamentals and structural design decisions
- PKI fundamentals
  - Use cases for internal PKIs
    - VPNs
    - MFA authentication
    - Encrypted email
    - MDM and Intune
    - M2M communication
    - Device certificates
    - Smart cards
    - Digital signatures
    - Qualified signatures under the Trust Services Act (VDG)
  - CA and Sub-CA structures – Which design is right for you?

PKI Planning
- Evaluation of PKI know-how and resources
- PKI relevant regulations – NIS 2 and others
- Creation of a PKI policy
- Which is the right deployment model for your PKI – on-premises, cloud or hybrid?
- Structural design of the PKI Certification Authority (CA) – How many Sub-CAs do you need?
- Management processes for the PKI, keys and digital certificates

Installation and configuration of PKI components
- Installation of the Root CA
- Configuration of the Root CA
- Installation of Sub-CAs
- Configuration of Sub-CAs
- Registration Authority (RA) concepts
  - Web enrollment for certificate management
  - Auto-enrollment for automatic certificate issuance
- Validation Authority (VA) for certificate validation
  - CRL Distribution Points (CDP) for revocation list distribution
  - Setting up and configuring an OCSP responder
  - Server-based Certificate Validation Protocol (SCVP) and certificate chains
- Setting up directory services
- Selecting key lengths and algorithms

PKI and certificate management
- Certificate management in Active Directory
- Administration using Group Policies (GPOs)
- Certificate deployment
  - SCEP (Simple Certificate Enrollment Protocol)
  - NDES (Network Device Enrollment Service)
- PKI management with PowerShell
- PKI management in Azure
- Planning regular certificate expirations and renewals
  - Automating certificate replacement
- Revoking and blocking certificates
- PKI trust models
  - Hierarchical PKI
  - Web of Trust
  - Use of Hardware Security Modules (HSM)

Objectives:

The course SC710: PKI Management for Microsoft™ Server 2025 and Azure covers important fundamentals for an efficient setup and the effective operation of a PKI using the functionalities of Microsoft™ Server 2025 and Azure Cloud. A correct setup is the foundation for the long-term, secure operation of PKIs within Microsoft™-based IT infrastructures.
In addition to designing the PKI to meet your organization's specific requirements, we explain how to build and operate a PKI using native Microsoft™ tools. We also detail the processes for managing the PKI itself, as well as the keys and certificates it generates. Furthermore, we provide insights into regulatory issues surrounding PKI and cover other relevant topics, such as Hardware Security Modules (HSMs) and the physical security of the Root CA.

Target audience:

The training SC710: PKI Management for Microsoft™ Server 2025 and Azure is ideal for:

System administrators
Information Security Officers (ISO)
Network architects
Newcomers and career changers

Prerequisites:

To be able to follow the learning pace and the content of the training SC710: PKI Management for Microsoft™ Server 2025 and Azure well, the following prior knowledge is helpful: