DigiCert University
Administering
DigiCert ONE
Software Trust
Manager (STM)
Virtual Instructor Led Training
About this course
Welcome to the Administering DigiCert Software Trust Manager(STM) certification
7.5 hours lecture course. This course provides a technical overview of the DigiCert ONE code signing
Fast Facts
solution. The course covers initial configuration of the service including license
management, account setup and certificate authority (CA) configuration. You will
7.5 hours hands-on labs
learn to use and modify built-in certificate templates, automated certificate enrollment
methods, and configure certificate issuance workflows. You will also learn how to
90 minute proctored exam configure CI/CD integration, key management and policy enforcement.
DigiCert Solutions The hands-on labs provide the opportunity to put theory into practice. The instruction
Engineer Certification and lab will take approximately 16 hours to complete.
Course Outline
Planning an STM System Account Continuous Integration/
Signing Fundamentals Releases Reporting and Logging
Deployment Configuration Continuous Delivery
• Describe the STM • Describe the • Describe basic code • Describe test, online • Create a script to • Describe the STM
value proposition benefits of test and signing methods and production and automate a build logging capabilities
production signing characteristics offline production (generate keypair, (client, server)
• List and describe keypair types create window, sign)
the supported STM • List and configure • Describe and install • List and describe
deployment models code signing the STM client tools • Describe and create • List and describe STM audit and
(Cloud / on premises certificate profiles and manage releases STM integration signature logs
/ hybrid) • Describe and install using the GUI capabilities
• Describe and the STM software and SMCTL • List and describe
• Describe the STM configure account development kit • Describe STM STM client logs
system architecture security controls • Describe and integration with Azure
(Components, • Describe the benefits configure offline • Export logs to CSV
software layers, key • Configure user of the SMCTL CLI production approvals • Describe and and XLSX files
stores) access controls using configure STM to
user types and group • Generate keypairs • Describe and integrate with Jenkins • Perform basic system
• List and describe the memberships and certificates for configure baselines troubleshooting tasks
STM deployment specific code signing and production • Describe STM
• Describe and use cases integration with • Examine and export
requirements release with system log files
configure access a baseline other development
• Perform initial policy controls • Sign MS, Java and platforms
system setup Docker Files • Create a baseline
• Integrate STM with and manual • Configure release
• Install STM license CertCentral for • Describe and perform window automation
certificate revocation approvals to prevent
and create Admin public code singing malware injection with Jenkins
Keys certificates (backdating,
implications, • Configure code
• Describe controlling impact) singing automation
keypair profiles using the CLI with
• Install client tools and Jenkins
• List and configure SDK, sign files and
key models (dynamic, perform a revocation
static, rotation)
• Create certificate
profiles, configure
user access, and
configure system
access policies
DigiCert University
What is DigiCert University?
DigiCert University is a non-degree granting, online
learning portal that offers short online, self-paced and
virtual instructor led training covering a variety of digital
trust related topics and solutions. DCU offers training for
both sales and technical professionals in the
security industry.
Who Should Attend
This course will benefit anyone responsible for sales engineering pre-sales support, service deployment planning
and implementation, and technical support of public key infrastructure (PKI) solutions. Participants should have
experience performing Microsoft domain administration tasks, basic networking configuration, and have a
foundational knowledge of PKI concepts such as cryptography and encryption. Familiarity with the Unix/Linux
command line and experience running simple commands is an asset.
Partners seeking to qualify for DigiCert partner program benefits may be required to complete technical certification
training depending on their partner tier. Please check with your DigiCert Channel Account manager for details.
Hands-On Experience Course Registration
Anyone wishing to register for a DigiCert University
The Administering DigiCert ONE Software Trust
account and to enroll in sales and technical
Manager (STM) course is augmented by a virtual lab
certification training should email:
environment. Using a supported, modern browser,
participants can access a virtual lab that simulates DCU_Help@Digicert.com
an enterprise PKI environment. Step-by-step lab
instructions guide you through the process of DigiCert partners can enroll for courses in DCU via
installing and configuring the infrastructure services the DigiCert Partner Portal. Depending on your role
and then the DigiCert ONE on-premise install. you will be enrolled in sales and technical certification
courses. Please contact your DigiCert channel
Complete the Digital Trust Associate certification, account manager for further information regarding
as well as Deploying DCONE Core Services, course enrollment or sales and technical certification
Administering DigiCert Trust Lifecycle Manager, and 2 requirements for DigiCert partners.
additional Technical Certification Courses to achieve
your Solutions Engineer certification.
DigiCert Software Trust Manager Technical Professional
Earners of the Software Trust Manager Technical Professional certification have
developed specialized skills in gathering requirements and planning the deployment of
a Software Trust Manager implementation. They can perform initial configuration of
the service including license management, account setup, and certificate authority (CA)
configuration. Badge earners are able to modify built-in certificate templates, automate
certificate enrollment methods, and configure cert issuance workflows.
