The method of installing and configuring Certificate Services in Active Directory
This article mainly explains "Active Directory installation certificate service and configuration method", the explanation content in the article is simple and clear, easy to learn and understand, please follow the small series of ideas slowly in-depth, together to study and learn "Active Directory installation certificate service and configuration method" bar!
1. Document Purpose
description of content
1. Add AD CA Certification Services
2. Configure CA Certification
test environment
1.Window Server2012 R2
2. Add AD Certificate Services
1. Open Server Manager and add "Roles and Features"
2. Click "Next" to select the installation type
3. Click "Next" to select the server
4. Click Next and check Active Directory Certificate Services.
5. Click "Next" to select the installed function
6. Click on "Next", AD Certificate Service Description
7. Click "Next" and check "Certificate Version Authority" and "Certificate Version Authority Web Registry"
8. Click "Next" to explain the Web Server Role (IIS)
9. Click "Next" and select Role Service Default.
10. Click "Next" to confirm installation.
11. Click "Install" and wait for the service installation to complete.
3. Configure AD Certificate Services
1. After AD Certificate Service is installed, click Configure AD Certificate Service on the Server Manager interface
2. Enter the AD Certificate Service Configuration Wizard interface
3. Click "Next" and check "Certificate Version Authority" and "Certificate Version Authority Web Registry"
4. Click "Next" to set the type
5. Click "Next" to specify CA type
6. Click Next to specify the private key type
7. Click "Next" to specify encryption options
8. Click "Next" to specify CA name (default)
9. Click "Next" to specify the certificate validity period
10. Click "Next" to specify the database location
11. Click "Next" to confirm the AD certificate service configuration.
12. Click "Configure" to configure AD certificate service. The following figure shows that the configuration is successful.
So far, the configuration of Active Directory Certificate Service has been completed, that is, AD service can support ldaps access mode. After TLS is enabled, the access port is 636, and the default 389 is the access port without TLS enabled.
Thank you for reading, the above is the "Active Directory installation certificate service and configuration method" content, after the study of this article, I believe you have a deeper understanding of the Active Directory installation certificate service and configuration method, the specific use of the need for everyone to practice verification. Here is, Xiaobian will push more articles related to knowledge points for everyone, welcome to pay attention!
