PKI & Certificate Management Technology Syllabus

• Explain PKI trust model and cryptographic foundations using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: map the components, identities, data paths and trust boundaries for PKI trust model and cryptographic foundations
• Evidence: produce an annotated architecture diagram and explain the validation result

• Explain Root and issuing CA hierarchy design using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: compare a baseline design with a risky or incomplete design for Root and issuing CA hierarchy design
• Evidence: produce a design decision record and explain the validation result

• Explain Certificate profiles, extensions and naming using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: trace one permitted and one denied access decision for Certificate profiles, extensions and naming
• Evidence: produce an access-flow worksheet and explain the validation result

• Explain Enrollment protocols and identity proofing using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: plan a least-privilege configuration and a safe rollout sequence for Enrollment protocols and identity proofing
• Evidence: produce a change plan with rollback steps and explain the validation result

• Explain TLS server, client and device certificate use cases using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: review policy order, dependencies, exceptions and rollback conditions for TLS server, client and device certificate use cases
• Evidence: produce a policy review checklist and explain the validation result

• Explain Private-key generation, storage and HSM concepts using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: configure or assess the control with secure defaults for Private-key generation, storage and HSM concepts
• Evidence: produce a configuration evidence sheet and explain the validation result

• Explain Certificate lifecycle, renewal and automation using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: test expected and unexpected behavior against explicit pass criteria for Certificate lifecycle, renewal and automation
• Evidence: produce a pass/fail validation record and explain the validation result

• Explain Revocation, CRL and OCSP operations using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: locate the relevant telemetry and build an investigation timeline for Revocation, CRL and OCSP operations
• Evidence: produce an investigation timeline and explain the validation result

• Explain Microsoft AD CS architecture and templates using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: triage a realistic finding and separate risk from expected activity for Microsoft AD CS architecture and templates
• Evidence: produce a triage note with severity rationale and explain the validation result

• Explain Cloud and public CA integration patterns using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: tune a noisy control without removing required visibility for Cloud and public CA integration patterns
• Evidence: produce a tuning record with before-and-after evidence and explain the validation result

• Explain Inventory, expiry monitoring and incident response using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: troubleshoot a production-style failure using an evidence-first workflow for Inventory, expiry monitoring and incident response
• Evidence: produce a troubleshooting runbook entry and explain the validation result

• Explain Enterprise PKI design capstone using current Standards Based terminology and connect it to the PKI & Certificate Management architecture
• Practice: combine design, validation, operations and handover in the capstone for Enterprise PKI design capstone
• Evidence: produce a concise capstone handover and portfolio artifact and explain the validation result

This is a published technology learning blueprint. Contact Techclick to confirm current trainer availability, delivery format, schedule, lab access and pricing before making a decision.

No. Vendor certification programmes and exam blueprints change independently. This syllabus focuses on practical technology skills and official documentation.

Yes, subject to trainer and lab availability. Share your existing environment, target outcomes and preferred timeline for a scoped discussion.