Blog Post

Microsoft Security Community Blog
25 MIN READ

Step by Step: 2-Tier PKI Lab

rahuljangda's avatar
rahuljangda
Icon for Microsoft rankMicrosoft
May 20, 2025

Setting Up a Two-Tier PKI Lab with an Offline Root CA and Online Issuing CA using AD CS

Purpose of this blog   Public Key Infrastructure (PKI) is the backbone of secure digital identity management, enabling encryption, digital signatures, and certificate-based authentication. However,...
Published May 20, 2025
Version 1.0
admin
attack surface management
enterprise security
exposure management
identity and access management
identity standards
posture management
privacy
security
transport layer security
pedroaoliveira's avatar
pedroaoliveira
Copper Contributor
May 22, 2025

Thank you for the great work, Rahul. 
Been tasked with raising a new 2tier PKI and will try this out very soon.
Could you also shed some light on removing an old CA from the domain?
Cheers!