Securing Active Directory Certificate Services with Ron Arestia
About this episode
You're using Active Directory Certificate Services - but is it configured securely? Richard talks to Ron Arestia about his work with organizations implementing their own Public Key Infrastructure (PKI) with ADCS. Ron explains how poorly configured ADCS enables lateral attacks within an organization once an initial breach occurs, allowing black hats to move throughout your network. A well-designed PKI system has tiers of protection, with the top level completely disconnected from the network. Or do you really need your own PKI system? The conversation digs into the various scenarios, including third-party options. Certificates are the top level of security for your organization - you need to get it right!
Links
- Active Directory Certificate Services
- Windows Hello for Business
- Certified Pre-Owned
- Microsoft Defender for Identity
- Secure Privileged Access
- Pass the Hash
- Microsoft Cloud PKI for Microsoft Intune
- Microsoft Entra Conditional Access
- Microsoft Autopilot
- Ron's Blog
Recorded February 6, 2026
Get every episode summarized
Each time RunAs Radio publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
Hosts & guests
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from RunAs Radio
State of WSUS with Adam Marshall
RunAs Radio
Reimagining Intranets with Susan Hanley
RunAs Radio
Security Features of PowerShell 7 with Mike O'Neill
RunAs Radio
Automatic Attack Disruption with Liz Tesch
RunAs Radio