RunAs Radio · 2026-02-11 · 44 min
You're using Active Directory Certificate Services - but is it configured securely? Richard talks to Ron Arestia about his work with organizations implementing their own Public Key Infrastructure (PKI) with ADCS. Ron explains how poorly configured ADCS enables lateral attacks within an organization once an initial breach occurs, allowing black hats to move throughout your network. A well-designed PKI system has tiers of protection, with the top level completely disconnected from the network. Or do you really need your own PKI system? The conversation digs into the various scenarios, including third-party options. Certificates are the top level of security for your organization - you need to get it right! Links Active Directory Certificate Services Windows Hello for Business Certified Pre-Owned Microsoft Defender for Identity Secure Privileged Access Pass the Hash Microsoft Cloud PKI for Microsoft Intune Microsoft Entra Conditional Access Microsoft Autopilot Ron's Blog Recorded February 6, 2026
Other episodes covering the same guests and topics, from across The B2B Podcast Index.
Stop Using Encrypted Email with William WoodruffSecurity Cryptography Whatever · on security90 / 100
The Evolution of Modern GRC ft. James Huang, Head of GRC @ GongSecurity & GRC Decoded · on security86 / 100
AI-Powered Forensics: How Attackers Automate BreachesCloud Security Podcast · on Active Directory78 / 100
AI Cyber is expanding a Vulnerability GapThe Enterprise AI Show · on security50 / 100
Security vs. Convenience: Can Healthcare Have Both? Cybersecurity at ViVE Podcast · on Active Directory44 / 100
Cybersecurity Awesomeness Podcast - Episode 168Cybersecurity Awesomeness Podcast · on security
The Content Management System Landscape with Matt Garrepy80 / 100
AI-Accelerated Supply Chain Attacks with Mackenzie Jackson83 / 100
Ransomware Readiness with Heather Renze
Azure Virtual Desktop Hybrid with Travis Roberts
Security Begins at Procurement with Jessie Schofer