Securing Active Directory Certificate Services with Ron Arestia

You're using Active Directory Certificate Services - but is it configured securely? Richard talks to Ron Arestia about his work with organizations implementing their own Public Key Infrastructure (PKI) with ADCS. Ron explains how poorly configured ADCS enables lateral attacks within an organization once an initial breach occurs, allowing black hats to move throughout your network. A well-designed PKI system has tiers of protection, with the top level completely disconnected from the network. Or do you really need your own PKI system? The conversation digs into the various scenarios, including third-party options. Certificates are the top level of security for your organization - you need to get it right! Links Active Directory Certificate Services Windows Hello for Business Certified Pre-Owned Microsoft Defender for Identity Secure Privileged Access Pass the Hash Microsoft Cloud PKI for Microsoft Intune Microsoft Entra Conditional Access Microsoft Autopilot Ron's Blog Recorded February 6, 2026

You can listen to Securing Active Directory Certificate Services with Ron Arestia online on Radio and Podcast. Open the player on this page to stream the available audio.

Securing Active Directory Certificate Services with Ron Arestia is an episode from RunAs Radio by Richard Campbell and Greg Hughes.

This episode is 00:44:27 long.

This episode was published on Feb 11, 2026.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from RunAs Radio when more episodes are available from the podcast feed.