Level 3Lab Included
Build an Offline Root CA
Hands-on lab course for building an offline Root CA in an isolated training environment. Covers OS preparation, ADCS installation, CAPolicy.inf configuration, key generation, CRL publication, and CA hardening — with a full lab guide and validation checklist.
6 hours 16 lessons 5 modules 0 completed
Lab Notice: All lab exercises are for isolated training environments only. Do not use these procedures directly in production without organizational approval, change control, backup validation, and security review.
Learning Objectives
Prepare a Windows Server VM for offline Root CA deployment
Author a CAPolicy.inf file for Root CA configuration
Install and configure the ADCS role for a Root CA
Generate a Root CA key pair and self-signed certificate
Configure CRL publication and CDP/AIA extensions
Harden the Root CA and prepare it for offline storage
Validate Root CA configuration using certutil and PKIView
Course Modules