MCSE

Designing and Managing a Windows Public Key Infrastructure

Introduction
This four-day, instructor-led course provides students with the knowledge and skills to design, deploy, and manage a public key infrastructure (PKI) to support applications that require distributed security. Students get hands-on experience implementing solutions to secure PKI-enabled applications and services, such as Microsoft Internet Explorer, Microsoft Exchange Server, Microsoft Internet Information Server, Microsoft Outlook®, and remote access services.

Audience
This course is intended for IT systems engineers who are responsible for designing and implementing security solutions. Individuals should have knowledge and experience to install and configure the Active Directory® directory service and security mechanisms for computers running Microsoft Windows® 2000 Server or Windows Server™ 2003 family.

At Course Completion
After completing this course, students will be able to:

• Describe PKI and the major components of a PKI.

• Design a certification authority (CA) hierarchy to meet business requirements.

• Install Certificate Services to create a CA hierarchy.

• Perform certificate management tasks, CA management tasks, and plan for disaster recovery of Certificate Services.

• Create and publish a certificate template, and replace an existing certificate template.

• Enroll a certificate manually, autoenroll a certificate, and enroll a smart card certificate.

• Implement manual and automatic key archival and recovery in a Windows Server 2003 PKI.

• Configure trust between organizations by configuring and implementing qualified subordination.

• Deploy smart cards in a Windows environment.

• Secure a Web environment by implementing SSL security and certificate-based authentication for Web applications.

• Implement secure e-mail messages by using Microsoft Exchange Server in a Windows 2000 or Windows 2003 environment.

Prerequisites
Before attending this course, students must have:

Familiarity with Windows 2000 or Windows Server 2003 core technologies, such as those described in the following Microsoft Official Curriculum (MOC) courses:

• Course 2274: Managing a Microsoft Windows Server 2003 Environment

• Course 2275: Maintaining a Microsoft Windows Server 2003 Environment

• Course 2152: Implementing Microsoft Windows 2000 Professional and Server

Familiarity with Windows 2000 or Windows 2003 networking technologies, such as those described in the following MOC courses:

• Course 2277: Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure: Network Services
• Course 2153: Implementing a Microsoft Windows 2000 Network Infrastructure

Familiarity with Windows 2000 or Windows 2003 directory services technologies, such as those described in the following MOC courses:

• Course 2279: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

• Course 2154: Implementing and Administering Microsoft Windows 2000 Directory Services

Microsoft Certified Professional Exams

This course will help the student prepare for the following Microsoft Certified Professional exams:

• Exam 70-214: Implementing and Managing Security in a Windows 2000 Network Infrastructure

• Exam 70-220: Designing Security for a Microsoft Windows 2000 Network

• Exam 70-298: Designing Security for a Microsoft Windows Server 2003 Network

• Exam 70-299, Implementing and Administering Security in a Microsoft Windows Server 2003 Network

Course Materials
The student kit includes a comprehensive workbook and other necessary materials for this class.

Course Outline

Module 1: Overview of Public Key Infrastructure

Module 2: Designing a Certification Authority Hierarchy

Module 3: Creating a Certification Authority Hierarchy

Module 4: Managing a Public Key Infrastructure

Module 5: Configuring Certificate Templates

Module 6: Configuring Certificate Enrollment

Module 7: Configuring Key Archival and Recovery

Module 8: Configuring Trust Between Organizations

Module 9: Deploying Smart Cards

Module 10: Securing Web Traffic by Using SSL

Module 11: Configuring E-mail Security