The Certificate Services Infrastructure in Microsoft Windows Server 2008


Overview/Description
Target Audience
Prerequisites
Expected Duration
Lesson Objectives
Course Number


Overview/Description
Design projects involving the addition or migration of a Public Key Infrastructure (PKI) and Windows Server 2008 Active Directory Certificate Services (AD CS) can be very challenging for the enterprise administrator and IT support team. A lot of effort is required to evaluate the requirements and policies of the business, as well as plan the most secure and suitable Certification Authority structure and certificate management approach. This course explores the function, components, and design considerations that need to be understood to be able to plan the implementation of Windows Server 2008 AD CS as part of a PKI. It demonstrates the use and maintenance of certificates, and covers the types and hierarchy of Certificate Authorities (CAs) that can be configured. The course also describes key features offered by Windows Server 2008 AD CS that may be deciding factors in a business’s decision to migrate or upgrade to AD CS, including Cryptography Next Generation, Web Enrollment, Online Certificate Status Protocol Support, and Network Device Enrollment Services. This course covers the objectives for Microsoft exam 70-647 PRO: Windows Server 2008, Enterprise Administrator. Passing the prerequisite MCTS exams and this Professional Series exam completes the requirements for the MCITP: Enterprise Administrator certification.

Target Audience
Windows Server administrators who are rolling out and supporting Windows Server 2008 in the enterprise; Windows Server administrators who manage infrastructure, web, and IT application servers for an enterprise organization; individuals seeking certification on Microsoft’s new generation server platform.

Prerequisites
As an exam prerequisite, any candidate should have a minimum of one year of experience implementing and administering a network operating system in an environment that has the following characteristics: • 250 to 5,000 or more users • three or more physical locations • three or more domain controllers • network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management • connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet As an exam prerequisite, any candidate should have taken and passed the following MCTS level exams: 70-640: TS: Windows Server 2008 Active Directory, Configuring 70-642: TS: Windows Server 2008 Network Infrastructure, Configuring 70-643: TS: Windows Server 2008 Application Infrastructure, Configuring

Expected Duration (hours)
2.5

Lesson Objectives

The Certificate Services Infrastructure in Microsoft Windows Server 2008

  • recognize how PKI works
  • recognize how to design a PKI infrastructure
  • recognize key considerations when using certificates
  • determine how to secure the Windows Server 2008 infrastructure
  • recognize the capabilities of key new Certificate Services features
  • installing AD Certificate Services
  • recognize key considerations when adding Windows Server 2008 AD Certificate Services to an existing infrastructure
  • request a certificate from a CA
  • create a custom certificate template
  • configure a restricted enrollment agent
  • renew certificates
  • revoke certificates and publish a CRL to clients
  • back up and restore the CA
  • use Certificate Services in Windows Server 2008
  • Course Number:
    ws_mwse_a08_it_enus