Every system administrator eventually hits the same fork: the Windows estate or the Linux estate. Most real environments contain both, but hiring managers rarely advertise for a generalist — they advertise for someone who can run Active Directory and Intune, or someone who can harden RHEL servers and automate them with Ansible. The best certification plan for a sysadmin, then, is not a single list of "top certs". It is a ladder with a shared foundation, a deliberate choice of operating-system lane, and a virtualisation-and-cloud layer on top that both lanes now share.
This guide builds that ladder: which certifications belong at each rung, what each exam actually involves as of 2026, and how to sequence them without wasting money on overlapping credentials. It stays focused on the system administrator role — if you are steering towards switches and routing instead, the sibling guide to certifications for network administrators covers that track, and hybrid infrastructure design roles are mapped in the infrastructure engineer certification guide.
What makes a certification "sysadmin-relevant"?
A useful sysadmin certification tests the things the job is made of: provisioning and maintaining servers, managing identities and permissions, storage, patching, monitoring, scripting and increasingly automation. Certifications that test troubleshooting end-user devices (help desk territory) or designing network topologies (network engineering) are adjacent, not core. Three filters help you judge any credential:
- Does it test operations, not just theory? Performance-based exams — where you fix real systems under time pressure — carry more weight for ops roles than pure multiple-choice.
- Does it match the estate you will actually run? A Red Hat credential is wasted in a pure Windows shop, and vice versa.
- Is it current? Several well-known sysadmin certs changed materially in 2025–2026 — new exam versions, renamed tracks, retired credentials. Studying for a retired exam version is the most expensive mistake on this path.
The foundation rung: before you specialise
If you are not yet in a sysadmin seat, one or two broad certifications establish baseline credibility. CompTIA A+ (the current V15 series: Core 1 exam 220-1201 and Core 2 exam 220-1202, launched March 2025) is the standard pre-sysadmin credential; it requires two exams of up to 90 questions each, with different passing scores (675 for Core 1, 700 for Core 2 on CompTIA's 100–900 scale). It is genuinely a support-role certification, though — if you are still in first-line support and planning your exit, the help desk certification guide sequences that stage properly.
CompTIA Server+ (SK0-005) is the most literal "sysadmin foundation" exam: server hardware, storage, virtualisation basics, disaster recovery. It is vendor-neutral, up to 90 questions in 90 minutes with a 750 passing score, and CompTIA recommends A+ plus around two years of server-environment experience beforehand. One change worth knowing: Server+ was historically valid for life, but from 1 October 2025 CompTIA moved it into the Continuing Education programme, so new Server+ certifications expire after three years and renew via CEUs. Its main limitation is age — SK0-005 launched in 2021 and is the oldest live exam in CompTIA's lineup — so treat it as a structured way to learn fundamentals rather than a headline credential.
The Linux lane
Linux skills are where sysadmin certification carries the most weight, because the flagship exams are hands-on. You have three realistic options, and they suit different situations.
Red Hat Certified System Administrator (RHCSA, exam EX200)
The RHCSA is the reference credential for enterprise Linux administration. The EX200 exam is 100% performance-based: you complete real administration tasks on live systems, with no multiple-choice questions, no internet access, and only the in-system product documentation to lean on. As of August 2026 the exam is based on Red Hat Enterprise Linux 10, and the US list price is widely reported at $500 per attempt (regional pricing varies — confirm on redhat.com). No prerequisites are enforced; Red Hat recommends its RH124 and RH134 courses or equivalent experience.
Red Hat restructured its entire certification programme in May 2026 into five tracks (Enterprise Linux, Ansible, OpenShift, Cloud-native Applications, AI) with five tiers. RHCSA now sits as the Administrator-tier credential of the Enterprise Linux track. Red Hat certifications remain "current" for three years — Red Hat's language is that they become "non-current" rather than expire — and earning a higher credential in the track extends your RHCSA by three years from the new pass date.
Because the exam format is practical, preparation has to be practical too. Build a lab, break it, rebuild it. Written practice questions still have a role earlier in your study — working through RHCSA EX200 practice questions is a quick way to test whether you understand each objective area well enough to attempt it hands-on, and to expose weak domains before you spend lab time on them.
LPIC-1 (Linux Professional Institute)
LPIC-1 is the vendor-neutral alternative: two multiple-choice-and-fill-in exams (101-500 and 102-500 in the current 5.0 version), 60 questions and 90 minutes each, priced at $200 per exam in Tier 1 markets such as the US, UK, EU and Australia — LPI uses regional pricing, so it is meaningfully cheaper in some countries. The passing score is 500 on a 200–800 scale, and the certification stays valid for five years, the longest validity in this comparison. Because it is written rather than performance-based, it proves knowledge more than demonstrated skill — but it covers Linux generally rather than one distribution, which suits mixed Debian/Ubuntu environments where RHEL specifics matter less. LPIC-2 and the four LPIC-3 specialities (including Security and Virtualization and Containerization) extend the same track for later career stages.
CompTIA Linux+ (XK0-006) and LFCS
CompTIA Linux+ moved to version XK0-006 in July 2025 — the older XK0-005 is no longer current. It is a single exam of up to 90 questions in 90 minutes, mixing multiple choice with performance-based questions, passing at 720 on the 100–900 scale, renewable on CompTIA's three-year CE cycle. It is a sensible one-exam option if you already hold other CompTIA certs, since CompTIA renewals stack — renewing your highest cert renews the ones below it.
The Linux Foundation Certified System Administrator (LFCS) is the fourth option: a performance-based, online-proctored, two-hour practical exam that recently became distribution-independent. At $445 including one free retake and two exam-simulator sessions, it is the cheapest hands-on Linux exam — but note its validity is now stated as two years, shorter than its rivals.
Which one? If your target employers run RHEL (most large enterprises, government, finance), RHCSA is the strongest signal. If you want vendor-neutral coverage with long validity, LPIC-1. If you want one exam inside an existing CompTIA renewal stack, Linux+. If budget is the constraint and you want hands-on validation, LFCS.
The Windows lane
Microsoft retired the classic MCSA-era Windows Server certification structure years ago, and its 2025–2026 overhaul retired roughly a dozen more role-based certifications — so the safe advice here is narrower than blog posts from even two years ago suggest.
The two Windows-side certifications you can currently build on with confidence:
- Microsoft 365 Endpoint Administrator Associate (MD-102) — active as of August 2026, a 100-minute proctored exam centred on Intune: preparing infrastructure for devices, managing and protecting them, and automating endpoint operations. For sysadmins whose "servers" are increasingly fleets of managed endpoints and cloud services, this is the modern desktop-and-device administration credential.
- Microsoft Azure Administrator Associate (AZ-104) — covered below, because it has become the de facto Windows-shop sysadmin certification even for people who think of themselves as on-premises administrators.
Microsoft's exam mechanics are consistent and worth knowing before you book: exams are scored on a 1–1,000 scale with 700 to pass (a scaled score, not 70%), Microsoft does not publish question counts, associate-level exams commonly cost around US$165 (pricing is set per country — confirm at booking), and role-based certifications expire after just one year but renew free via an open-book online assessment on Microsoft Learn. That free-renewal model is a genuine cost-of-ownership advantage over CompTIA, Red Hat and LPI, all of which charge money or require re-examination to stay current.
If you are researching legacy Windows Server exam content, note that the old 70-series MCSA exams (for example 70-417, the Windows Server 2012 MCSA upgrade exam) are long retired and useful only as historical study reference, not as a certification target.
The cloud and virtualisation rung
Modern sysadmin job adverts almost always name a hypervisor or a cloud platform. Two credentials dominate this layer.
Azure Administrator Associate (AZ-104)
AZ-104 is the anchor certification for hybrid Windows/Azure administration and remains fully active in Microsoft's post-overhaul lineup. The 100-minute exam covers Azure identities and governance, storage, compute, virtual networking, and monitoring — which is to say, the sysadmin job description translated into Azure. There are no formal prerequisites, but Microsoft expects working familiarity with PowerShell, the Azure CLI, the portal and ARM or Bicep templates; candidates coming straight from AZ-900 consistently find the jump steep. It is also the mandatory prerequisite for the Azure Solutions Architect Expert certification (AZ-305), so it opens the architecture path later.
A sensible preparation pattern: work through the official study guide domains hands-on in a free-tier subscription, then use timed AZ-104 practice questions to benchmark readiness — analyse your results by domain, drill the weakest area, and repeat, rather than re-taking the same questions until the answers are memorised.
Broader multi-cloud comparisons — AWS and Google Cloud equivalents and which provider to bet on — are a separate decision covered in the guide to the best cloud computing certifications.
VMware and virtualisation
The VMware Certified Professional (VCP) has historically been the on-premises virtualisation credential for sysadmins. Since Broadcom's acquisition of VMware, however, the certification programme's structure, names and pricing have changed and continue to change — check the current programme directly on Broadcom's VMware certification pages before committing study time or money. The underlying skill (running vSphere estates) remains in demand wherever on-prem virtualisation persists; the credential landscape around it is simply not stable enough to recommend a specific exam code here.
A worked sequencing plan
Certification order matters more than certification count. Here is a realistic sequence for the most common starting point — a support technician or junior administrator with one to two years of experience:
- Months 0–4: Server+ or A+ completion. Close out the foundation tier. Skip this rung entirely if you already administer servers daily; recommended-experience lines are recommendations, not requirements.
- Months 4–12: pick your OS lane and finish its core cert. RHCSA or LPIC-1 for the Linux lane; MD-102 for a Microsoft-endpoint-heavy role. Do not do both lanes at once — split focus is the classic mistake at this stage.
- Months 12–20: AZ-104. Whichever lane you chose, the cloud administration layer now sits on top of it. Linux-lane admins should not skip this rung; a large share of Azure workloads are Linux VMs, and the RHCSA-plus-AZ-104 pairing reads as "hybrid-ready" to employers.
- Months 20+: automation or depth. On the Red Hat side, EX294 — the Ansible automation exam historically known as the RHCE exam, retitled in Red Hat's 2026 restructure as Red Hat Certified Advanced System Administrator in Ansible — is the natural next step and requires a current RHCSA. On the Microsoft side, AZ-305 (which requires AZ-104) points towards architecture.
Treat the month markers as pacing guidance, not promises — no vendor in this list publishes official study-hour figures, and your existing hands-on experience moves these timelines dramatically in either direction.
Common mistakes on the sysadmin cert path
- Studying a retired exam version. In the last eighteen months alone: Linux+ moved from XK0-005 to XK0-006, A+ moved to 220-1201/1202, the Linux Foundation retired its LFCT cert outright, and Microsoft retired AZ-204, AI-102, DP-100 and (on 31 August 2026) AZ-500. Always confirm the live exam code on the provider's page before buying materials.
- Collecting overlapping entry certs. Server+, Linux+, LFCS and LPIC-1 all overlap heavily. One, chosen for fit, beats three.
- Ignoring renewal economics. Microsoft renews annually but free; CompTIA runs a three-year CE cycle with fees and CEU requirements; Red Hat needs a re-exam or a higher credential every three years; LPIC gives you five years. Over a decade, these differences add up to real money and real re-study time — factor them in before you build a five-cert portfolio.
- Preparing for a hands-on exam with memorisation. The RHCSA and LFCS grade what you can do on a live system. Question banks are for verifying understanding of objectives and finding weak domains — the lab is where the pass actually gets earned.
Where should your ladder start?
If you take one decision away from this guide, make it the lane decision. Look at ten job adverts for the sysadmin roles you actually want in your city or remote market. Count how many lead with Active Directory, Intune and Azure versus how many lead with RHEL, Ansible and bash. That ratio — not any generic ranking — tells you whether your next exam voucher should say Microsoft or Red Hat on it. Then add AZ-104 on top of whichever lane you picked, because the hybrid layer is no longer optional in either.
Whichever exam you book first, benchmark before you pay: the free sample questions in the certification exams directory let you gauge where you stand against the objectives before committing to a date.