Literature and other resources about public key infrastructures and Active Directory Certificate Services

The following is an overview of literature available on the market on the subject of public key infrastructures and Active Directory Certificate Services, as well as online resources from Microsoft and other PKI specialists.

Literature

Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the Application of regulationsto realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can downloaded via GitHub and can be used free of charge. Professional maintenance is also offered.

Literature specific to Active Directory Certificate Services

• Microsoft Windows Server 2008 PKI and Certificate Security. Brian Komar, 2008. ISBN-10: 3866456484 (only available second-hand).
• Microsoft Windows Server 2003 PKI and certificate security: designing and deploying certificate-based security solutions for your network. Brian Komar, 2004. ISBN-10: 3860639730 (only available used). See also the unofficial list of errata of the book.
• Implementing an enterprise public key infrastructure using Microsoft Active Directory certificate services. Uwe Gradenegger, 2016. ISBN-10: 3961165386.
• PKI and CA in Windows networks: The Administrator's Guide. Certificate management and security for your Windows systems. Peter Kloep, 2019. ISBN-10: 3836272318.

Literature about PKI in general

• Security without Obscurity: A Guide to PKI Operations. Jeff Stapleton and W. Clay Epstein, 2016. ISBN-10: 036765864X
• Bulletproof TLS and PKI, Second Edition: Understanding and Deploying SSL/TLS and PKI to Secure Servers and Web. Ivan Ristic, 2022. ISBN-10: 1907117091.

Literature about cryptography in general

• ASN.1 Complete. John Larmouth, 1999. ISBN-10: 0122334353.
• ASN.1 Communication Between Heterogeneous Systems. Olivier Dubuisson, 2000. ISBN-10: 0126333610 (only available second-hand).
• Cryptography: methods, protocols, infrastructures. Klaus Schmeh, 2016. ISBN-10: 9783864903564.

Online resources

PKI Specialist Blogs

• „Unnitigated Risk" Blog by Ryan Hurst, one of the inventors of OCSP at ValiCert and former product manager for Active Directory Certificate Services at Microsoft.
• The PKI Guy Blog by Mark Cooper
• PKI Blog by Vadims Podans
• PKI Blog by Hans-Joachim Knobloch

Whitepaper on PKI

• Securing Public Key Infrastructure (Microsoft)
• Securing and Hardening Network Device Enrollment Service for Microsoft Intune and System Center Configuration Manager (Microsoft)
• 34 PKI & ADCS Whitepapers You Must Read (Vadims Podans)