Microsoft Active Directory Certificate Services training

PKI Solutions Inc. Microsoft Active Directory Certificate Services training

“A poorly designed, executed or managed PKI can introduce more security issues than it solves.”
-Mark B. Cooper

Building expertise with certificate services

The ability to design and manage a public key infrastructure (PKI) is highly dependent on the skills and knowledge of those managing it. PKI Solutions training focuses on building knowledge and skills with all features of Microsoft Active Directory Certificate Services (ADCS). There is a strong emphasis on security, best practices and hands-on skills labs. All of the classes that are available are the most up-to-date PKI training available for Windows Server 2012 R2 and Windows Server 2016.


These courses are available for onsite delivery at your organization or as an open-enrollment workshop in locations around the world. Onsite deliveries offer the ability to customize the agenda as well as defining specific areas where additional emphasis is desired. Open-enrollment workshops provide flexibility for customers needing only a few individuals trained. They also offer the opportunity to network with other security conscious PKI organizations. Don’t see a class near you? Contact us to let us know you are interested and if we get enough interest, we will try to schedule a class!

CourseLocationDatePriceGroup DiscountsRegistration
Microsoft PKI In-depthPortland, OregonMarch 26-30, 2018$5,000 YESSOLD OUT
Microsoft PKI In-depthWashington, DCMay 21-25, 2018$5,000 YESSOLD OUT
Microsoft PKI In-depthLondon, EnglandJune 11-15, 2018$5,000 YESRegister
Advanced Microsoft PKIPortland, OregonJuly 23-27, 2018$5,000 YESRegister
Advanced Microsoft PKIWashington, DCAugust 13-17, 2018$5,000 YESRegister
Advanced Microsoft PKILondon, EnglandSept 10-14, 2018$5,000 YESRegister

Training courses offered

Microsoft PKI In-depth

This course covers PKI fundamentals and concepts all the way through a deep-dive into PKI and certificate services by focusing on building knowledge and skills with all of its features. There is a strong emphasis on security, best practices and hands-on skills labs. Whether you are new to PKI or already manage an existing PKI, you will find this class can fill in the missing blanks in your expertise.


Syllabus: Available here for download

Advanced Microsoft PKI

This advanced PKI class focuses on hand-on labs and topics that build on existing Microsoft certificate services and PKI knowledge of the student. Students will spend the majority of the class working on real-life scenarios in the lab ranging from deploying enrollment services, hacking OCSP for near real-time revocation checking, CA migrations, SHA1 to SHA2 migrations, disaster recovery scenarios, certificate reporting and CA database management. The course also covers code signing, key-pair file management and restricted certificate enrollment agents.

Class audience: INTERMEDIATE and ADVANCED. Attending the PKI In-depth course first is recommended, but is not required

Syllabus: Available here for download

Securing Microsoft ADCS with Thales nCipher hardware security modules

This course focuses on deploying Thales nCipher HSMs to secure ADCS. It focuses on the three signing roles available with ADCS — certificate authorities, OCSP responders and NDES enrollment servers. There is a strong emphasis on security, operational controls, availability and hands-on skills labs. The course is designed for Windows Server 2012 R2 and Windows Server 2016. This course is only offered onsite at your organization and can be coordinated to be delivered in conjunction with a Thales nCSE training course.

Class audience: This course is recommended for architects, support engineers and administrators that want to protect their ADCS signing keys with a Thales HSM product.

Syllabus: Available here for download

Availability: Onsite delivery at your organization. Contact us for details.

Introduction to certificates and keys for Windows and Linux systems

This comprehensive in-person, hands-on training class introduces the concepts and practical functionality of x.509 certificates.  It is targeted at those with limited or no certificate knowledge and is ideal for people who need to quickly get up to speed on certificates or fill in gaps in their existing certificate knowledge. The class provides an extensive description of how PKI works and the practical knowledge that developers and IT staff can apply in their current and future careers.

Class audience: NOVICE

Availability: Onsite delivery at your organization. Contact us for details.

Payment details & discounts

We accept payment by corporate purchase orders, credit cards or company check. All prices listed are in U.S. Dollars. Group discounts are available where noted and provide a 10% discount to organizations sending three or more students to the same session.


Certificate of completion

Every student that attends and completes the full week of training will receive a certificate of completion. The certificate is perfect for framing or providing as proof of course completion towards professional advancement goals. In addition, the courses qualify for ISC2 continuing education credit for annual CPE commitments.


Course feedback

Don’t just take our word for it, here is what our past students have to say about our courses:

“It’s a real treat and privilege to attend, I’m learning a ton, and it’s directly related to the work I do. The Labs so far have been amazing,. You are a master presenter, and an obvious master of the subject matter, which also makes it enjoyable.” – Charlie Kawasaki (CTO Pacstar Communications)

“We recently hired [PKI Solutions] to deliver a PKI training class to 12 of my engineers. All the feedback from the class was extremely positive. It was very clear to my staff that Mark’s PKI knowledge was second to none. I’ll finish this endorsement with an unsolicited comment from one of my engineers who told me the training was “the best of the best”.” – Tony Ventura (Peel Regional Police)

In general, ADCS is one of the more complex Microsoft technologies to implement and while the initial setup can be challenging enough, the real test is how well it continues to function for the duration of its existence. With that in mind, I would definitely recommend the course to anyone intending to use PKI in their enivironment[sic] or to offer services in PKI consulting.”David Machula (New York State Teachers’ Retirement System)

I had a little exposure to ADCS before I came, but didn’t realize how much I didn’t know or wouldn’t have known if I relied solely on information in the community. My PKI re-deployment definitely wouldn’t have been successful without the knowledge And tools I gained this week. Your class should definitely be required for anyone attempting ADCS.” – Matt Walker (Stronghold Limited)

I was so amazed you could answer all the questions in class! this is the very first class I didn’t hear ‘this is not in the topic’ or ‘let me get back to you later’!” – Benjamin Kwok (Marvel Semiconductor)

  © Copyright 2013-2018 PKI Solutions Inc. // All Rights Reserved // Terms of Service // Privacy Policy // Pricing and Refund Policies