Windows PKI blog

Windows PKI documentation reference

We have a broad list of documentation for the Windows PKI. To let you find the right content quicker, I have put together a grouped list of the current papers, knowledge base articles and web casts related to the technology.

General information

• Security Glossary

• Public Key Infrastructure

• Certificate Services overview 

Training

• Designing and Managing a Windows Public Key Infrastructure 

Internet Newsgroup

• microsoft.public.security.crypto

Envision

• Cryptography and Microsoft Public Key Infrastructure

• PKI Enhancements in Windows XP Professional and Windows Server 2003

• Certificate Services Technical Reference

Plan

• Ten Risks of PKI: What You’re not Being Told about Public Key Infrastructure
• Microsoft root certificate program members

• Planning Your Public Key Infrastructure

• Designing and Implementing a PKI: Part I Design and Planning

• Designing and Implementing a PKI: Part II

• Designing your own PKI Infrastructure

• Scale testing the world’s largest PKI… all running on WS08R2 and Hyper-V

• To Cluster or Not to Cluster CAs

• How CA Certificates Work

• How Certificates Work

• Windows XP Professional: Certificate Revocation and Status Checking

• Choosing Security Solutions That Use Public Key Technology

• Cryptography for Network and Information Security

Build

• Best Practices for Implementing a Microsoft Windows Server 2003 Public Key Infrastructure

• Windows Server System Reference Architecture for Certificate Services

• Planning and Implementing Cross-Certification and Qualified Subordination Using Windows Server 2003

Deploy

• Deploying and Managing PKI inside Microsoft

• TechNet Support WebCast: Best Practices for Public Key Infrastructure: Steps to build an offline root certification authority (part 1 of 2)

• TechNet Support WebCast: Best practices for Public Key Infrastructure: Setting up an offline subordinate and an online enterprise subordinate (part 2 of 2) 

• Extended Validation support for websites using internal certificates

Windows Server 2003

• Certificate Autoenrollment in Windows Server 2003

• Advanced Certificate Enrollment and Management

• Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services

• Configuring and Troubleshooting Certificate Services Client–Credential Roaming

• Webcast: Credential Roaming Basics

• Cryptography Tools 

Windows Server 2008

• Cross-forest Certificate Enrollment with Windows Server 2008 R2

• Certificate Server Enhancements in Windows Server codename "Longhorn" whitepaper

• Microsoft SCEP Implementation Whitepaper

• Installing, Configuring, and Troubleshooting the Microsoft Online Responder

• Implementing an OCSP responder

  • Part I Introducing OCSP

  • Part II Preparing

  • Part III - Configuring OCSP for use with Enterprise CAs

  • Part IV - Configuring OCSP for use with Standalone CAs

  • Part V High Availability

  • Part VI Configuring Custom OCSP URIs via Group Policy 

• Longhorn Beta3 Certificate Templates Whitepaper

• How to configure the Windows Server 2008 CA Web Enrollment Proxy

Operate

• Windows Server 2003 PKI operations and configuration guide

• Key Archival and Management in Windows Server 2003

• Certificate Services example implementation: Key archival and recovery

• Troubleshooting Certificate Status and Revocation

• TechNet Support WebCast: Best practices for relocating certification authority and for failure recovery

• TechNet Support WebCast: Troubleshooting and evaluating Public Key Infrastructure health in Microsoft Windows Server 2003 and Microsoft Windows 2000
  

• How to move a certification authority to another server

• HOWTO: Move a certificate authority to a new server running on a domain controller

• How to remove manually Enterprise Windows Certificate Authority from Windows 2000/2003 Domain
  

• Custom extensions in the CAPolicy.inf file do not take effect after you renew the root CA certificate by using a new key

• How to make a stand-alone certification authority compliant with ISIS-MTT version 1.1

• How to make an Enterprise certification authority compliant with ISIS-MTT version 1.1

• Digital Certificates Cleanup Script

• CRL freshness checking scripts

• Windows Server 2008 R2 CAPolicy.inf Syntax

Certificate enrollment

• Creating "Wildcard" Certificate Requests for IIS using the Windows Vista/Server 2008 Certificates MMC plugin
• Certificate Creation Tool (Makecert.exe)

Certificate management

• Mapping One Smartcard Certificate to Multiple Accounts

Powershell

• Working with Certificates in Active Directory Powershell

Windows Vista

• Troubleshooting PKI problems on Windows Vista

Windows Server 2008

• Active Directory Certificate Services Upgrade and Migration Guide

• Configuring and Troubleshooting Certification Authority Clustering in Windows Server 2008

Develop

• Windows Client Certificate Enrollment Protocol Specification

• Cryptography Reference

• Cryptography, CryptoAPI, and CAPICOM

• Customizing the Certificate Services Web Enrollment Pages

• Creating Certificate Requests Using the Certificate Enrollment Control and CryptoAPI

• Code-Signing Best Practices

Extend

• Windows Vista Smart Card Infrastructure