This article is an evolving collection of Active Directory Certificate Services (AD CS) and Public Key Infrastructure (PKI) step-by-step information. The links in this article should take you to places where you can perform or see the actual steps for deploying or administering a PKI using AD CS.
 

Windows Server 2008 and Release 2

• Active Directory Certificate Services Step-by-Step - This is the most popular content of the AD CS TechNet Library, but currently only illustrates a single-tier PKI hierarchy
• Designing and Implementing a PKI: Part II Implementation Phases and Certificate Authority Installation - part 2 of a 5 part series that discusses how to implement a two-tier PKI infrastructure from the Microsoft Ask the Directory Services team blog.   
• Windows 2008 PKI / Certificate Authority (AD CS) basics - This is content (not on the Microsoft site) illustrates using a two-tier PKI hierarchy

↑ Return to top

Windows Server 2003 and Release 2

• TechNet Support WebCast: Best Practices for Public Key Infrastructure: Steps to build an offline root certification authority (part 1 of 2)
• TechNet Support WebCast: Best practices for Public Key Infrastructure: Setting up an offline subordinate and an online enterprise subordinate (part 2 of 2) Walkthrough (Planning and Implementing Cross-Certification and Qualified Subordination Using Windows Server 2003)
• How to install a PKI based on Microsoft Certificate Services in Windows Server 2003.

↑ Return to top

Additional PKI Resources

• Community directory for documentation and information: Windows PKI Documentation Reference and Library(http://social.technet.microsoft.com/wiki/contents/articles/987.windows-pki-documentation-reference-and-library.aspx)
• Frequently asked questions (FAQs) list Active Directory Certificate Services (AD CS) Frequently Asked Questions (FAQ) (http://social.technet.microsoft.com/wiki/contents/articles/1587.active-directory-certificate-services-ad-cs-frequently-asked-questions-faq.aspx)
• Support forum: Windows Server Security Forum (http://social.technet.microsoft.com/Forums/en-US/winserversecurity/threads)
• Product team blog: Windows PKI Blog (http://blogs.technet.com/b/pki/)
• Support Team Blog: Ask the Directory Services team (http://blogs.technet.com/b/askds/)
• Script repository: TechNet Script Center Repository  (http://gallery.technet.microsoft.com/scriptcenter) search for Certification, Certificate, or PKI
• chnology overview: Active Directory Certificate Services (AD CS) Overview

 ↑ Return to top