After completing Windows 2000 Security Design MCSE 70-220: Designing a Public Key Infrastructure, the user should be able to:

	Design Certificate Authority (CA) hierarchies
	Identify certificate server roles
	Manage certificates
	Integrate with third-party certificate authorities
	Map certificates to user accounts

Understanding Certificate Services

	Public Key Infrastructure concepts
	Components of Windows 2000 PKI
	Certificate server roles
	Planning CA hierarchies and certificate policy
	Trust models

Installing Certificate Services

Installing Certificate Services

Configuring Certificate Services

	Requesting and installing subordinate CA certificates
	Configuring a CA
	Testing your CA

Managing Certificates

	Certificate lifecycle
	Adding a certificate template
	Command-line functions
	Mapping certificates
	Troubleshooting tips

Interoperability and Third-Party PKI

	Windows 2000 PKI interoperability
	Interoperability considerations
	Evaluating features of third-party PKIs

This course has the following features:

	Exercises that allow users to practice in Windows 2000
	A file containing the text of the exercises
	Simulations that allow users to practice course skills, even if they don't have access to Windows 2000
	A glossary
	A Skill Assessment

	All courses in the series Windows 2000 Professional, a passing score on MCSE exam 70-210, or equivalent experience
	All courses in the series Windows 2000 Server MCSE 70-215, a passing score on MCSE exam 70-215, or equivalent experience
	All courses in the series Windows 2000 Network Administration MCSE 70-216, a passing score on MCSE exam 70-216, or equivalent experience
	All courses in the series Windows 2000 Active Directory MCSE 70-217, a passing score on MCSE exam 70-217, or equivalent experience
	Windows 2000 Security Design MCSE 70-220: Analyzing Business Requirements (W22001)
	Windows 2000 Security Design MCSE 70-220: Analyzing Technical Requirements (W22002)
	Windows 2000 Security Design MCSE 70-220: Establishing a Security Baseline (W22003)
	Windows 2000 Security Design MCSE 70-220: Planning Security for System Resources (W22004)
	Windows 2000 Security Design MCSE 70-220: Designing a Security Group Strategy (W22005)
	Windows 2000 Security Design MCSE 70-220: Designing Security Policy Inheritance (W22006)
	Windows 2000 Security Design MCSE 70-220: Protecting Resources with Auditing and Encryption (W22007)
	Windows 2000 Security Design MCSE 70-220: Using Native Windows 2000 Authentication (W22008)
	Windows 2000 Security Design MCSE 70-220: Using Alternate Authentication Strategies (W22009)

	Windows 2000 Security Design MCSE 70-220: Designing Security for Network Services (W22011)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Access between Networks (W22012)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Communications Channels (W22013)

Microsoft® is a registered trademark of Microsoft Corporation.
Windows 2000® is a trademark of Microsoft Corporation.