Solved PKI Infrastructure

---

Hello. Any possibility for the near future for a video series regarding PKI infrastructure, but one that explains a production environment? Normally is just on CA but in reality is not recommended. It was a great help for a topic that for me is very advanced!
Thank YOU!

Hello @fabio-teles ,

Look for MCSA Windows Server 2016 - 70-742 in the course library. There are 10 episodes on Implement Active Directory Certificate Services. We look at setting up a two-tier PKI, using an offline root CA and an Enterprise subordinate CA. I would definitely recommend against a single CA in a production environment.

Hope this helps, if you have any more questions, let me know.

Thanks for watching!

@mike-rodrick said in PKI Infrastructure:

Hello @fabio-teles ,

Look for MCSA Windows Server 2016 - 70-742 in the course library. There are 10 episodes on Implement Active Directory Certificate Services. We look at setting up a two-tier PKI, using an offline root CA and an Enterprise subordinate CA. I would definitely recommend against a single CA in a production environment.

Hope this helps, if you have any more questions, let me know.

Thanks for watching!

Thank you! I was looking for PKI in the search so I didn't saw that...Thank you Mike! I made the MCSA Update to Server 2016 but wanted a more deep dive in the PKI. I'm sure it will help a lot!

Thank you again!

Hello Mike!
I was watching the videos this days and testing on my home lab but the Root CA mentioned in the video was an Enterprise CA, domain joined. I had red some information regarding the OFFLINE CA and is the part of configuring the CRL, etc,, that is the most difficult to understand to me until now.

Any further assistance or guidance?
Thank you again!

Hi again! I sent an email to Adam I was looking for some info for Bitlocker and then PKI for the DRA and send the email explaining the doubts to him. Thank you again. You guys are awsome