Literature and other resources about public key infrastructures and Active Directory Certificate Services

The following is an overview of literature available on the market on the subject of public key infrastructures and Active Directory Certificate Services, as well as online resources from Microsoft and other PKI specialists.

Literature

Literature specific to Active Directory Certificate Services

• PKI and CA in Windows Networks: The Administrator's Guide. Certificate management and security for your Windows systems. Peter Kloep, 2019. ISBN-10: 3836272318
• Microsoft Windows Server 2008 PKI and certificate security. Brian Komar, 2008. ISBN-10: 3866456484 (only available used).
• Microsoft Windows Server 2003 PKI and certificate security: designing and deploying certificate-based security solutions for your network. Brian Komar, 2004. ISBN-10: 3860639730 (only available used). See also the unofficial list of errata of the book.
• Implementing an enterprise public key infrastructure using Microsoft Active Directory certificate services. Uwe Gradenegger, 2016. ISBN-10: 3961165386.

Literature about PKI in general

• Security without Obscurity: A Guide to PKI Operations. Jeff Stapleton and W. Clay Epstein, 2016. ISBN-10: 036765864X
• Bulletproof TLS and PKI, Second Edition: Understanding and Deploying SSL/TLS and PKI to Secure Servers and Web. Ivan Ristic, 2022. ISBN-10: 1907117091
• Understanding PKI: Concepts, Standards, and Deployment Considerations. Carlisle Adams and Steve Lloyd, 2010. ISBN-10: 0321743091

Literature about cryptography in general

• Cryptography: methods, protocols, infrastructures. Klaus Schmeh, 2016. ISBN-10: 9783864903564.

Training opportunities

• Microsoft Services Education offers paid Training on Active Directory Certificate Services

Online resources

Whitepaper on PKI

• Securing Public Key Infrastructure (Microsoft)
• Securing and Hardening Network Device Enrollment Service for Microsoft Intune and System Center Configuration Manager (Microsoft)
• 34 PKI & ADCS Whitepapers You Must Read (Vadims Podans)

PKI Specialist Blogs

• "Umnitigated Risk" Blog by Ryan Hurst, one of the inventors of OCSP at ValiCert and former product manager for Active Directory Certificate Services at Microsoft.
• The PKI Guy Blog by Mark Cooper
• PKI Blog by Vadims Podans
• PKI Blog by Matthias Leckel

Channel 9 from Microsoft Developer Network (MSDN)

• Windows Server 2012 R2: Implementing a Basic PKI
• Everything you forgot to ask about Certificate Services from Orin Thomas
• Demystifying Encryption, Certificates, and PKI by Vijay Oberoi

Youtube channel of Christopher Delay, Microsoft Premier Field Engineer

• Cryptography Basics
• Changing Hostnames During a PKI Migration
• Upgrading your PKI to Windows Server 2012
• Revoking Orphaned Certificates
• SMTP Exit Module
• Issuing CA Certificate Renewal