Summary

Digital certificates are more and more used in modern infrastructure as additional layers of security to prove the objects and services are genuine, and they are the same objects and services they claim to be. In this chapter, you learned what PKI is and how it exactly works in the infrastructure. Then, we looked into AD CS components and their duties. Later, we moved into the PKI planning and discussed what needs to be considered when building PKI. Then, we further looked into PKI deployment models and evaluated their advantages and disadvantages. Last but not the least, we went through a step-by-step guide to set up two-tier PKI successfully.
In the next chapter, you are going to learn about another Active Directory role service--Active Directory Federation Service, and see how identities have been handled in a federated environment.

...