> Where to start with PKI: six paths for beginners, developers, IT operations, security experts, leaders and teachers, from 10 minutes to deep study. Source: https://pkizerotohero.com/start/ Start here # Pick your path Choose the line that sounds most like you. Each path has a 10-minute start, a one-hour plan and a way to go deep. None of it needs an account. ## New to this You have heard of HTTPS and padlocks and want to know what is really going on. No maths or code needed. 10 minutes 1. Read the first crash course lesson: [Secrets and the sharing problem](https://pkizerotohero.com/course/secrets-and-sharing/) 2. Meet Ken, Rosa and the villains: [the cast](https://pkizerotohero.com/cast/) 1 hour 1. Crash course lessons 1 to 3: [the crash course](https://pkizerotohero.com/course/) 2. The plain-words start of each chapter in Part I: [Chapter 1, The idea](https://pkizerotohero.com/handbook/symmetric-encryption/#the-idea) 3. Then [Chapter 3, key pairs](https://pkizerotohero.com/handbook/key-pairs/#the-idea) Go deep 1. Read Parts I and II of [the handbook](https://pkizerotohero.com/handbook/) 2. Look up any word in [the glossary](https://pkizerotohero.com/handbook/glossary/) 3. Explore one subject at a time: [the topics](https://pkizerotohero.com/topics/) 4. Play the first levels of the game: [Keystone](https://pkizerotohero.com/play/) ## Developer You write code that calls HTTPS APIs, and a certificate error is in your way right now, or will be soon. 10 minutes 1. Find your exact message on [the error pages](https://pkizerotohero.com/errors/) 2. Or paste it into [the error finder](https://pkizerotohero.com/tools/error-finder/) 1 hour 1. Chapters 12 to 15: [trust stores](https://pkizerotohero.com/handbook/trust-stores/) 2. [chains and path validation](https://pkizerotohero.com/handbook/certificate-chains/) 3. [the TLS 1.3 handshake](https://pkizerotohero.com/handbook/tls-handshake/) 4. Then follow [how to check the chain a server sends](https://pkizerotohero.com/guides/check-remote-certificate-chain/) Go deep 1. Everything on [chains and trust stores](https://pkizerotohero.com/topics/chains-and-trust/) 2. Make your stack trust a private CA: [Python, Node.js and npm](https://pkizerotohero.com/guides/trust-ca-python-node/) 3. Keep [the cheat sheet](https://pkizerotohero.com/handbook/cheat-sheet/) 4. Then [mutual TLS](https://pkizerotohero.com/handbook/mutual-tls/) ## IT ops and platform You run servers, load balancers and Kubernetes, and certificate renewals are part of your week. 10 minutes 1. Read [what's changing in PKI](https://pkizerotohero.com/changes/) 2. Plan renewals with [the lifetime calendar](https://pkizerotohero.com/tools/lifetime/) 1 hour 1. Chapters 19 to 22: [inventory, expiry and renewal](https://pkizerotohero.com/handbook/certificate-lifecycle/) 2. [ACME and the 47-day schedule](https://pkizerotohero.com/handbook/acme/) 3. [a CA of your own](https://pkizerotohero.com/handbook/private-ca/) 4. Work through [the short-lived certificates checklist](https://pkizerotohero.com/guides/prepare-47-day-certificates/) Go deep 1. Everything on [lifecycle and automation](https://pkizerotohero.com/topics/lifecycle-and-automation/) 2. Install and renew: [the how-to guides for your servers](https://pkizerotohero.com/guides/) 3. [Mutual TLS](https://pkizerotohero.com/handbook/mutual-tls/) 4. The error pages for your stack: [all error pages](https://pkizerotohero.com/errors/) ## Security and PKI expert You design or audit PKI. You want precise wording, primary sources and the current rules. 10 minutes 1. Skim how we explain [revocation in depth](https://pkizerotohero.com/handbook/revocation/#how-it-really-works) 2. Check our sources in [the standards index](https://pkizerotohero.com/handbook/standards/) 1 hour 1. Chapters 16 to 18: [revocation](https://pkizerotohero.com/handbook/revocation/) 2. [Certificate Transparency](https://pkizerotohero.com/handbook/certificate-transparency/) 3. [famous failures](https://pkizerotohero.com/handbook/famous-failures/) Go deep 1. Chapters 21, 22 and 26: [HSMs and key ceremonies](https://pkizerotohero.com/handbook/hsm-and-key-ceremonies/) 2. [private two-tier PKI](https://pkizerotohero.com/handbook/private-ca/) 3. [post-quantum cryptography](https://pkizerotohero.com/handbook/post-quantum/) 4. Everything on [private PKI](https://pkizerotohero.com/topics/private-pki/) 5. Then [the timeline](https://pkizerotohero.com/handbook/timeline/) Reviewing us? [Tell us anything you would word differently](mailto:info@pkizerotohero.com?subject=Error%20report%3A%20Expert%20review). ## Leader You lead a team or own the risk. You need the picture, the dates and the decisions, without the maths. 10 minutes 1. Read [PKI for leaders in 10 minutes](https://pkizerotohero.com/leaders/) 1 hour 1. Work through [the crash course](https://pkizerotohero.com/course/) 2. It takes about 90 minutes in all; lessons 8 and 9 matter most for risk: [Running PKI](https://pkizerotohero.com/course/running-pki/) Go deep 1. Read the dates in [what's changing](https://pkizerotohero.com/changes/) 2. Give your teams [the preparation checklist](https://pkizerotohero.com/guides/prepare-47-day-certificates/) 3. Every chapter ends with a short box for you: [an example](https://pkizerotohero.com/handbook/certificate-lifecycle/#why-it-matters-to-the-business) 4. Train your people with [Teams (coming soon)](https://pkizerotohero.com/teams/) ## Teacher You teach 12 to 18-year-olds or adult learners and want a ready lesson that is accurate and fun. 10 minutes 1. Read [the teachers' page](https://pkizerotohero.com/teachers/) 1 hour 1. The 45-minute lesson plan and worksheet are on [the teachers' page](https://pkizerotohero.com/teachers/) 2. They follow crash course lessons 1 to 4: [the crash course](https://pkizerotohero.com/course/) Go deep 1. Characters your class will remember: [the cast](https://pkizerotohero.com/cast/) 2. Words in plain English: [the glossary](https://pkizerotohero.com/handbook/glossary/) 3. One subject per lesson: [the topics](https://pkizerotohero.com/topics/) 4. The game's first levels, playable now: [Play](https://pkizerotohero.com/play/)