Pro Active Directory Certificate Services: Creating and Managing Digital Certificates for Use in Microsoft Networks

ISBN-13: 9781484274880 / Angielski / Miękka / 2022 / 480 str.

Lawrence E. Hughes

Opis

Intermediate-Advanced user level

Spis treści

Part I: Foundations in Cryptography, Digital Certificates and PKI

Chapter 1-01 – Basic Cryptography – Symmetric Key Encryption

Chapter 1-02 – Basic Cryptography – Hash Function

Chapter 1-03 – Basic Cryptography – Asymmetric Key Encryption

Chapter 1-04 – Digital Signature and Digital Envelope

Chapter 1-05 – X.509 Digital Certificate

Chapter 1-06 – PKCS #10 Certificate Signing Request CSR)

Chapter 1-07 – Certificate Revocation and Renewal

Chapter 1-08 – Key Management

Chapter 1-09 – Certificate Management Protocols

Chapter 1-10 – Public Key Infrastructure (PKI)

Chapter 1-11 – SSL and TLS

Chapter 1-12 – S/MIME Secure Email

Part II: Deploying and Using Active Directory Certificate Services

Chapter 2-01 – Chapter 13: Deploy Microsoft Certificate Services

Chapter 2-02 – Chapter 14: Issue and Manage TLS Server Certificates

Chapter 2-03 – Chapter 15: Issue and Manage TLS Client Certificates

Chapter 2-04 – Chapter 16: Issue and Manage S/MIME Secure E-mail Certificates

Chapter 2-05 – Chapter 17: Issue and Manage Windows Logon Certificates

Chapter 18: Appendix A: Relevant Standards.

O autorze

Lawrence E. Hughes is a renowned expert in cryptography and PKI. He previously worked at VeriSign and co-founded and was CTO at CipherTrust (a secure email proxy appliance). He also was employed at Sixscape Communications in Singapore where he was responsible for creating much of their technology. Lawrence founded the US-based company PKIEdu Inc. (Public Key Infrastructure Education) to conduct training and consulting in the area of PKI. He created and taught the courseware at VeriSign (the first leading company in the PKI space) and presented it internationally to affiliates and large customers. He is a security author and was heavily involved in the deployment of several national certification authorities in the UK, Netherlands, and Australia.   

Blurb

In order to deploy and use Microsoft Certificate Services, you need to understand the fundamentals of cryptography, digital signatures, encryption, TLS, and S/MIME. It is also important to understand the concepts behind public key infrastructure (PKI). This book teaches you all the required background knowledge you need. Then it takes you deeper, step by step, teaching you how to deploy Certificate Services and configure it to issue various digital certificate types, complete with examples of using these certificates with IIS, Outlook, and Windows.

Microsoft-based networks—on-premises, hybrid, and cloud-based networks—are used in companies of all sizes. Within them, there are many applications of digital certificates that can be created and managed by Microsoft Certificate Services. As security is more important than ever, and cryptography and PKI are fundamental to so many of these defenses, understanding Microsoft Certificate Services is becoming an increasingly more desirable skill.

Most IT workers don’t realize the many uses and purposes of Certificate Services, especially within a corporate or government agency network, and how tightly integrated they are with the Microsoft Windows Domain style of networks and Active Directory (on-premises or cloud-based, including Azure, AWS, and Google Cloud Services). This book will teach you the gamut.

You will appreciate the learning approach presented in the book, beginning with the basics (cryptographic primitives such as encryption and message digests), getting into combinations of primitives to accomplish specific things (such as digital signatures and envelopes), and then trying real-word systems based on digital certificates and PKI (such as TLS, S/MIME secure email, cryptographic authentication, and more). The book wraps it all up and teaches you how to deploy Certificate Services and issue the various types of certificates, including how they are used.

What You Will Learn

• Understand basic cryptography (symmetric and asymmetric key encryption, message digests, and digital signatures and envelopes)
• Know how TLS, S/MIME, and cryptographic authentication work
• Discover applications of cryptography related to secure servers with TLS and cryptographic (passwordless) authentication to online services including Windows and secure email
• Get to know the common types of digital certificates, how to create and manage them, and examples of their use with IIS, Outlook, etc. 

This book is for Microsoft system and network engineers, security engineers, and CISOs. Readers should have familiarity with Windows Server 2019 (or more recent) and Active Directory.

Lawrence E. Hughes is a renowned expert in cryptography and PKI. He previously worked at VeriSign and co-founded and was CTO at CipherTrust (a secure email proxy appliance). He also was employed at Sixscape Communications in Singapore where he was responsible for creating much of their technology. Lawrence founded the US-based company PKIEdu Inc. (Public Key Infrastructure Education) to conduct training and consulting in the area of PKI. He created and taught the courseware at VeriSign (the first leading company in the PKI space) and presented it internationally to affiliates and large customers. He is a security author and was heavily involved in the deployment of several national certification authorities in the UK, Netherlands, and Australia.