Install Certificate Services: enable HTTPS for Web sites

Enable HTTPS for Web sites

The previous article introduced the concepts of PKI and digital certificates, and how to install certificate services is described in detail below.

Link to the previous post: http://yangshufan.blog.51cto.com/13004230/1942840

Experimental environment:

N install a certificate server on the DC server

1. Use Administrator to log in to DC and add roles

two。 Select "Active Directory Certificate Services", next

3. Add required role services

4. Select "Enterprise", next step

5. Select "Root CA", next step

6. Select "New Private key" and next

7. Complete the installation according to the default settings

N generate certificate request

1. On the Web server, open IIS and double-click Server Certificate

two。 Create Certificate Service

3. Enter the necessary information, next step

4. Select the default encryption program and key length

5. Specify the file name and save location for the certificate and complete the certificate application

N submit and install the certificate

1. Copy the certificate file previously requested

two。 Open an IE browser and enter "https:// Certificate Server ip/certsrv"

3. Click apply for Certificate, apply for Advanced Certificate

4. Paste the previous certificate file and submit the certificate

5. Download and save the certificate to your local computer

6. Double-click Server Certificate

7. Click to complete the certificate application

8. Enter the file name and path of the CA file, take a good name, and complete the certificate application.

N configure SSL for Web sites

1. Select the site that needs to use the certificate, and click bind

two。 Select the type "https", the previously installed certificate

3. Double-click SSL Settings

4. Select the required features, security level

5. In the IE browser on the client, enter the IP address or domain name of the web site to access the website.