Page 169 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Microsoft states: “This article describes how to configure Active Directory Certificate Services (AD CS) certificate templates to use Module-Lattice-Based Digital Signature Algorithm (ML-DSA) as the public key algorithm.”
Read the explainer
Microsoft states: “The Active Directory Certificate Services (AD CS) Network Device Enrollment Service (NDES) support a policy module that provides extra security for the Simple Certificate Enrollment Protocol (SCEP).”
Read the guide
Microsoft states: “The Certificate Enrollment Policy Web Service works with the Certificate Enrollment Web Service to provide policy-based automatic certificate enrollment for these users and computers.”
Read the playbook
Microsoft states: “Certificate Templates are managed through the Certificate Templates Microsoft Management Console (MMC) snap-in.”
Read the briefing
Microsoft states: “Certificate templates can greatly simplify the task of administering an Active Directory Certificate Services (AD CS) certification authority (CA) by allowing an administrator to issue certificates preconfigured for selected tasks.”
Read the checklist
Microsoft states: “This role service is useful for organizations that need a flexible and interactive method for certificate enrollment without requiring specific client configurations.”
Read the explainer
Microsoft states: “It’s recommended that you configure NDES to specify a user account, which requires extra steps.”
Read the guide
Microsoft states: “This article describes how to configure Active Directory Certificate Services (AD CS) certification authorities (CAs) to use Module-Lattice-Based Digital Signature Algorithm (ML-DSA) for Post-Quantum Cryptography (PQC).”
Read the playbook
Microsoft states: “Windows Local Administrator Password Solution (Windows LAPS) lets you configure policy settings to manage local administrator passwords securely and automatically.”
Read the briefing
Microsoft states: “Learn how to get started with Windows Local Administrator Password Solution (Windows LAPS) and Microsoft Entra ID.”
Read the checklist