InsecurePlanet PKI Security
Training CenterCourse Catalog
Course Catalog

PKI Training Courses

Five courses across five learning levels — from PKI Foundations to a hands-on two-tier PKI lab capstone. Each course includes structured modules, knowledge checks, worksheets, and lab instructions.

Lab Notice: All lab exercises are for isolated training environments only. Do not use these procedures directly in production without organizational approval, change control, backup validation, and security review.

Level 1Available

PKI Foundations

Build a solid conceptual foundation in public key infrastructure. This course covers asymmetric cryptography, certificate structure, trust hierarchies, certificate lifecycle, and the role of Certificate Authorities — without assuming prior PKI experience.

3 hours 18 lessons 5 modules Knowledge checks Worksheets
Learning Objectives
Explain asymmetric cryptography and how key pairs work
Describe the structure and fields of an X.509 certificate
Identify the components of a PKI trust hierarchy
Explain certificate lifecycle: issuance, renewal, revocation
+3 more objectives
Audience
IT administrators new to PKISecurity analystsHelp desk engineersIdentity and access management professionals
Start Course
Level 2Available

Microsoft ADCS Architecture and Security

Deep-dive into Microsoft Active Directory Certificate Services. Covers CA roles, certificate templates, enrollment mechanisms, auto-enrollment, security model, and common attack paths including ESC1–ESC8.

5 hours 24 lessons 6 modules Knowledge checks Worksheets
Learning Objectives
Describe the ADCS role and its components in Windows Server
Explain Enterprise CA vs. Standalone CA
Design a two-tier PKI hierarchy for an enterprise environment
Explain certificate template structure, permissions, and security
+3 more objectives
Prerequisites
PKI Foundations (Level 1) or equivalent experience
Audience
PKI architectsWindows Server administratorsSecurity engineersIdentity and access management professionals
Start Course
Level 3AvailableLab Included

Build an Offline Root CA

Hands-on lab course for building an offline Root CA in an isolated training environment. Covers OS preparation, ADCS installation, CAPolicy.inf configuration, key generation, CRL publication, and CA hardening — with a full lab guide and validation checklist.

6 hours 20 lessons 5 modules Knowledge checks Worksheets
Learning Objectives
Prepare a Windows Server VM for offline Root CA deployment
Author a CAPolicy.inf file for Root CA configuration
Install and configure the ADCS role for a Root CA
Generate a Root CA key pair and self-signed certificate
+3 more objectives
Prerequisites
PKI Foundations (Level 1)
ADCS Architecture and Security (Level 2)
Audience
PKI architectsWindows Server administratorsLab engineers
Start Course
Level 3Coming SoonLab Included

Build an Enterprise Issuing CA and HTTP CDP/AIA Publication

Hands-on lab course for deploying an enterprise Issuing CA subordinate to the offline Root CA built in the previous course. Covers ADCS installation, subordinate CA certificate request, HTTP CDP/AIA configuration, and full chain validation.

7 hours 22 lessons 5 modules Knowledge checks Worksheets
Prerequisites
Build an Offline Root CA (Level 3)
Audience
PKI architectsWindows Server administratorsLab engineers
Coming Soon
Level 5Coming SoonLab Included

PKIView, certutil, and Training SSL Certificate Capstone

Master PKIView and certutil for operational PKI validation and troubleshooting. Culminates in a capstone exercise: issue a training SSL certificate from the lab PKI, validate the full chain, and test revocation.

5 hours 18 lessons 4 modules Knowledge checks Worksheets
Prerequisites
Build an Enterprise Issuing CA (Level 3)
Certificate Issuance and Auto-Enrollment (Level 4)
Audience
PKI administratorsSecurity engineersIT operations
Coming Soon