|
Size: 2119
Comment:
|
Size: 2125
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 18: | Line 18: |
| 1. From a command prompt type: {{{certreq -submit -attrib “CertificateTemplate:WebServer” “C:\...\cert.req”}}} This will create a file containing you certificate to install. | 1. From a command prompt type: certreq -submit -attrib “CertificateTemplate:WebServer” “C:\...\cert.req” 1. This will create a file containing you certificate to install. |
Lab 07
Perform the following
- Install a AD Certificate server on CPTR230A.
- I used all defaults for my AD Certificate server as a Enterprise Root CA.
- Install IIS with an X.509 certificate for your default site on CPTR230A
- Install IIS Latest (include the management service)
Only if you are using Core - IISInstallCertificateFromCommandLine. If you take this option, you will complete everything but the next item, which you do need!
Only if you are using Core - See remote administration docs.
- Using IIS Admin Console: With the Server selected in the navigation pane, double click the Server Certificates icon in the central details pane.
- Click on: "Create Domain Certificate..." in the action pane.
- Make sure to use your full hostname for the common name. E.g. I used "cptr230a.scot.internal"
- Click on your default web site to bind the certificate to your website.
- Click on Bindings, and click on ADD
- Add a binding for https and select the certificate that you just created.
Document the new services for each server on a new page named services I.e.
Services Installed:
CPTE230A (192.168.1.2)
- AD Certificate Authority
- IIS (With SSL Certificate from AD Cert. Auth.)
Video Grade Guide
Topics |
Points |
Video shows the Certificate Server and certificates issued on CPTE230A |
30 |
Video shows a website showing certificate, and that it is trusted by your browser. |
60 |
Video talks through the documentation |
10 |