E_2821 - Designing and Managing a Windows Public Key Infrastructure
A következő aktuális időpontról érdeklődjön telefonon, vagy a NetAcademia postán keresztül.
A tanfolyam hossza: 4 nap
Ára: 245 000 Ft +ÁFA
Általános leírás
This four-day, instructor-led course provides students with the knowledge and skills to design, deploy, and manage a public key infrastructure (PKI) to support applications that require distributed security. Students get hands-on experience implementing solutions to secure PKI-enabled applications and services, such as Microsoft Internet Explorer, Microsoft Exchange Server, Microsoft Internet Information Server, Microsoft Outlook, and remote access services.
Szükséges előismeretek
Familiarity with Windows 2000 or Windows Server 2003 core technologies, such as those described in the following Microsoft Official Curriculum (MOC) courses:Course 2274: Managing a Microsoft Windows Server 2003 Environment
Course 2275: Maintaining a Microsoft Windows Server 2003 Environment
Course 2152: Implementing Microsoft Windows 2000 Professional and Server
Familiarity with Windows 2000 or Windows 2003 networking technologies, such as those described in the following MOC courses:
Course 2277: Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure: Network Services
Course 2153: Implementing a Microsoft Windows 2000 Network Infrastructure
Familiarity with Windows 2000 or Windows 2003 directory services technologies, such as those described in the following MOC courses:
Course 2279: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure
Course 2154: Implementing and Administering Microsoft Windows 2000 Directory Services
A tanfolyam elvégzésével szerezhető képességek
After completing this course, students will be able to:Describe PKI and the major components of a PKI.Design a certification authority (CA) hierarchy to meet business requirements.
Install Certificate Services to create a CA hierarchy.
Perform certificate management tasks, CA management tasks, and plan for disaster recovery of Certificate Services.
Create and publish a certificate template, and replace an existing certificate template.
Enroll a certificate manually, autoenroll a certificate, and enroll a smart card certificate.
Implement manual and automatic key archival and recovery in a Windows Server 2003 PKI.
Configure trust between organizations by configuring and implementing qualified subordination.
Deploy smart cards in a Windows environment.
Secure a Web environment by implementing SSL security and certificate-based authentication for Web applications.
Implement secure e-mail messages by using Microsoft Exchange Server in a Windows 2000 or Windows 2003 environment.
A tanfolyam anyaga az alábbi vizsgákhoz tartalmaz értékes információkat
70-298 Designing Security for a Microsoft Windows Server 2003 Network70-299 Implementing Security in a Microsoft Windows Server 2003 Network
A tanfolyam tartalma
| 1. Introduction |
| Introduction to PKI Introduction to Cryptography |
| 2. Overview of Public Key Infrastructure |
| Introduction to PKI Introduction to Cryptography Certificates and Certification Authorities |
| 3. Certificates and Certification Authorities |
| Certificates and Certification Authorities |
| 4. Designing a Certification Authority Hierarchy |
| Identifying CA Hierarchy Design Requirements Common CA Hierarchy Designs Documenting Legal Requirements Analyzing Design Requirements Designing a CA Hierarchy Structure |
| 5. Lab A: Identifying Trusted Root CAs |
| Creating a Custom MMC Viewing CA Certificates in Certificates MMC Analyzing CA Certificate Distribution Methods |
| 6. Identifying |
| Identifying CA Hierarchy Design Requirements Common CA Hierarchy Designs |
| 7. Documenting |
| Documenting Legal Requirements |
| 8. Analyzing |
| Analyzing Design Requirements |
| 9. Creating a Certification Authority Hierarchy |
| Creating an Offline CA Validating Certificates Planning CRL Publication Installing a Subordinate CA |
| 10. Designing |
| Designing a CA Hierarchy Structure |
| 11. Managing a Public Key Infrastructure |
| Introduction to PKI Management Managing Certificates Managing Certification Authorities Planning for Disaster Recovery |
| 12. Lab A: Designing a CA Hierarchy |
| Identifying Applications and Certificate Holders Identifying Technical and Business Requirements Designing a CA Hierarchy |
| 13. Creating an Offline CA |
| Creating an Offline CA |
| 14. Validating Certificates |
| Validating Certificates |
| 15. Planning CRL Publication |
| Planning CRL Publication |
| 16. Installing a Subordinate CA |
| Installing a Subordinate CA |
| 17. Labs |
| Lab A: Installing an Offline CA Configuring CAPolicy.inf for installing the Offline Root CA Installing the Offline Root CA Lab B: Publishing CRLs and AIAs Defining CRL and AIA Publication Settings Publishing the CRL and AIA Information Adding the Web Server to Local Intranet Site Lab C: Implementing a Subordinate Enterprise CA Installing the Subordinate Enterprise CA Validating the PKI Health of your CA Hierarchz After completing this module, students will be able to:Create an offline root CA. Design an infrastructure to validate certificates. Design an infrastructure to publish CRLs. Install a subordinate CA. |
| 18. Configuring Certificate Templates |
| Introduction to Certificate Templates Designing and Creating a Certificate Template Publishing a Certificate Template Managing Changes in a Certificate Template |
| 19. Configuring Certificate Enrollment |
| Introduction to Certificate Enrollment Enrolling Certificates Manually Autoenrolling Certificates |
| 20. Configuring Key Archival and Recovery |
| Introduction to Key Archival and Recovery Implementing Manual Key Archival and Recovery Implementing Automatic Key Archival and Recovery |
| 21. Configuring Trust Between Organizations |
| 22. Introduction to PKI Management |
| Introduction to PKI Management |
| 23. Managing |
| Managing Certificates Managing Certification Authorities |
| 24. Planning for Disaster Recovery |
| Planning for Disaster Recovery |
| 25. Labs |
| Lab A: Enabling Role Separation Defining CA Administrators and Certificate Managers Restricting Certificate Managers Generating Certificate Requests Testing CA Administrator Tasks Testing Certificate Manager Tasks Enabling Certificate Services Auditing Lab B: Backing Up and Restoring a Certification Authority Determining Backup Privileges Backing Up Certificate Services Removing the CA’s Private Key from the CA Certificate Store Restoring the System State Backup After completing this module, students will be able to: Describe the use of roles in PKI management. Perform certificate management tasks. Perform CA management tasks. Plan for disaster recovery of Certificate Services. |
| 26. Deploying Smart Cards |
| Introduction to Smart Cards Enrolling Smart Card Certificates Deploying Smart Cards |
| 27. Securing Web Traffic by Using SSL |
| Introduction to SSL Security Enabling SSL on a Web Server Implementing Certificate-based Authentication |
| 28. Configuring E-mail Security |
| Introduction to E-mail Security Configuring Secure E-mail Messages Recovering E-mail Private Keys Migrating a KMS Database to a CA Running Windows Server 2003 |