This session covers public key infrastructure (PKI) architectures, designs, and practical applications including an introduction to PKI public/private key pairs, core concepts, setting up a basic PKI infrastructure, auto-enrollment, recovering from an outage, certificate revocation list (CRL) checking, and PKI architecture for large-scale deployments. An example case is presented for a GET-VPN DMVPN scenario.