This page was initially a copy from http://blogs.technet.com/b/pki/archive/2007/08/19/windows-pki-documentation-reference.aspx. Since TechNet WIKI is better suited to maintain continuously enhancing information, we will maintain the link library here.

General information

• Reducing the operational risk when defending the open network with Microsoft PKI
• Security Glossary
• Public Key Infrastructure 
• Certificate Services overview 
• Active Directory Certificate Services Overview
• Active Directory Certificate Services Frequently Asked Questions (AD CS FAQ)
• Cryptographic Services (MSDN Reference)

Training

• Designing and Managing a Windows Public Key Infrastructure
• CAC/PKI Common Access Card/Public Key Infrastructure (focused U.S. Army and Department of Defense - Windows 2000)

Internet Forum

• TechNet Security forum 

Envision

• PKI Enhancements in Windows 7 and Windows Server 2008 R2 
• Cryptography and Microsoft Public Key Infrastructure 
• PKI Enhancements in Windows XP Professional and Windows Server 2003 
• Certificate Services Technical Reference 

Plan

• PKI Design Guidance
• Infrastructure Planning and Design Guide for Active Directory Certificate Services 
• Ten Risks of PKI: What You’re not Being Told about Public Key Infrastructure 
• Microsoft root certificate program members 
• Planning Your Public Key Infrastructure 
• Designing and Implementing a PKI: Part I Design and Planning 
• Designing and Implementing a PKI: Part II 
• Designing and Implementing a PKI: Part III Certificate Templates 
• Designing and Implementing a PKI: Part IV Configuring SSL for Web Enrollment and Enabling Key Archival
• Designing and Implementing a PKI: Part V Disaster Recovery 
• Designing your own PKI Infrastructure 
• Scale testing the world’s largest PKI… all running on WS08R2 and Hyper-V 
• To Cluster or Not to Cluster CAs 
• How CA Certificates Work 
• How Certificates Work 
• Windows XP Professional: Certificate Revocation and Status Checking 
• Choosing Security Solutions That Use Public Key Technology 
• Cryptography for Network and Information Security 
• HSPD-12 Logical Access Authentication and Active Directory Domains 

Build

• Best Practices for Implementing a Microsoft Windows Server 2003 Public Key Infrastructure 
• Windows Server System Reference Architecture for Certificate Services 
• Planning and Implementing Cross-Certification and Qualified Subordination Using Windows Server 2003 

Deploy

• Installing a Suite B Only PKI with Windows Server 2008 R2 
• Deploying and Managing PKI inside Microsoft 
• TechNet Support WebCast: Best Practices for Public Key Infrastructure: Steps to build an offline root certification authority (part 1 of 2) 
• TechNet Support WebCast: Best practices for Public Key Infrastructure: Setting up an offline subordinate and an online enterprise subordinate (part 2 of 2) 
• Extended Validation support for websites using internal certificates 
• TechNet Webcast: Deploying a PKI Solution with Active Directory Certificate Services
• TechNet Webcast: Deploying PKI Inside Microsoft
• Windows 2008 PKI - This article contains a step-by-step walkthrough about building offline root CA and online issuing CA, but there are some errors. For example, it recommends establishing actual locations for the CDP and AIA on the root CA, which should not be done (as stated in the sample CAPolicy.inf).

Windows Server 2003

• Certificate Autoenrollment in Windows Server 2003 
• Advanced Certificate Enrollment and Management 
• Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services 
• Configuring and Troubleshooting Certificate Services Client–Credential Roaming 
• Webcast: Credential Roaming Basics 
• Cryptography Tools 

Windows Server 2008

• Certificate Server Enhancements in Windows Server codename "Longhorn" whitepaper 
• How to configure the Windows Server 2008 CA Web Enrollment Proxy 
• Microsoft SCEP Implementation Whitepaper 
• Longhorn Beta3 Certificate Templates Whitepaper 
• Configuring Network Device Enrollment Service for Windows Server 2008 with Custom Certificates 

Online Certificate Status Protocol

• Installing, Configuring, and Troubleshooting the Microsoft Online Responder 
• Implementing an OCSP responder
  • Part I Introducing OCSP 
  • Part II Preparing 
  • Part III - Configuring OCSP for use with Enterprise CAs 
  • Part IV - Configuring OCSP for use with Standalone CAs 
  • Part V High Availability 
  • Part VI Configuring Custom OCSP URIs via Group Policy 

Windows Server 2008 R2

• Cross-forest Certificate Enrollment with Windows Server 2008 R2 
• Certificate Enrollment Web Services in Windows Server 2008 R2 

Operate

• Windows Server 2003 PKI operations and configuration guide 
• Key Archival and Management in Windows Server 2003 
• Certificate Services example implementation: Key archival and recovery 
• Troubleshooting Certificate Status and Revocation 
• TechNet Support WebCast: Best practices for relocating certification authority and for failure recovery 
• TechNet Support WebCast: Troubleshooting and evaluating Public Key Infrastructure health in Microsoft Windows Server 2003 and Microsoft Windows 2000 
• How to move a certification authority to another server 
• HOWTO: Move a certificate authority to a new server running on a domain controller 
• How to remove manually Enterprise Windows Certificate Authority from Windows 2000/2003 Domain 
• Custom extensions in the CAPolicy.inf file do not take effect after you renew the root CA certificate by using a new key 
• How to make a stand-alone certification authority compliant with ISIS-MTT version 1.1 
• How to make an Enterprise certification authority compliant with ISIS-MTT version 1.1 
• Digital Certificates Cleanup Script 
• CRL freshness checking scripts 
• Certificate Chaining Engine — how this works 
• Windows Server 2008 R2 CAPolicy.inf Syntax 
• Troubleshooting Certificate Autoenrollment in Active Directory Certificate Services (AD CS)
• Certutil tasks for managing certificates

Certificate enrollment

• Creating "Wildcard" Certificate Requests for IIS using the Windows Vista/Server 2008 Certificates MMC plugin 
• Certificate Creation Tool (Makecert.exe) 
• Certreq Tool 
• Certreq.exe Syntax 
• Certutil Tool 

Certificate management

• Mapping One Smartcard Certificate to Multiple Accounts 

Powershell

• Working with Certificates in Active Directory Powershell 
• Public Key Infrastructure PowerShell module 

Windows Vista

• Troubleshooting PKI problems on Windows Vista 

Windows Server 2008

• Active Directory Certificate Services Upgrade and Migration Guide 
• Configuring and Troubleshooting Certification Authority Clustering in Windows Server 2008 

Develop

• Windows Client Certificate Enrollment Protocol Specification 
• Cryptographic Services
• Cryptography Reference 
• Cryptography, CryptoAPI, and CAPICOM 
• Customizing the Certificate Services Web Enrollment Pages 
• Creating Certificate Requests Using the Certificate Enrollment Control and CryptoAPI 
• Code-Signing Best Practices 

Extend

• Windows Vista Smart Card Infrastructure