04-01-install the first certification authority on Win 2019 Core

"actual combat training for system engineers"

-04-deploy a certification authority

-01-install the first certification authority

On Win 2019 Core

Author: endless learning

QQ communication group: 454544014

C:\ Users\ Administrator.i-x-Cloud > PowerShell

Windows PowerShell

Copyright (C) Microsoft Corporation. All rights reserved.

PS C:\ Users\ Administrator.i-x-Cloud > HostName

021-CA01

PS C:\ Users\ Administrator.i-x-Cloud > IPConfig / ALL

Windows IP configuration

Hostname. . . . . . . . . . . . . : 021-CA01

Main DNS suffix. . . . . . . . . . . : i-x-Cloud.com

Node type. . . . . . . . . . . . : mixed

IP routing is enabled. . . . . . . . . . : no

The WINS agent is enabled. . . . . . . . . : no

DNS suffix search list. . . . . . . . : i-x-Cloud.com

Ethernet Adapter Ethernet0:

Connect a specific DNS suffix. . . . . . . :

Description. . . . . . . . . . . . . . . Intel (R) 82574L Gigabit Network Connection

Physical address. . . . . . . . . . . . . : 00-0C-29-91-98-00

DHCP is enabled. . . . . . . . . . . : no

Automatic configuration is enabled. . . . . . . . . . : yes

Local link IPv6 address. . . . . . . . : fe80::50:ec20:66f7:2a1a%6 (preferred)

IPv4 address. . . . . . . . . . . . : 10.1.1.21 (preferred)

Subnet mask. . . . . . . . . . . . : 255.255.255.0

Default gateway. . . . . . . . . . . . . : 10.1.1.254

DHCPv6 IAID. . . . . . . . . . . : 100666409

DHCPv6 client DUID. . . . . . . : 00-01-00-01-23-9D-91-9D-00-0C-29-91-98-00

DNS server. . . . . . . . . . . : 10.1.1.11

10.1.1.12

NetBIOS on TCPIP. . . . . . . : enabled

PS C:\ Users\ Administrator.i-x-Cloud >

Add-WindowsFeature ADCS-Cert-Authority, ADCS-Web-Enrollment

Install-AdcsCertificationAuthority-CAType EnterpriseRootCa-ValidityPeriod Years-ValidityPeriodUnits 99-DatabaseDirectory "D:\ Windows\ system32\ CertLog"-LogDirectory "D:\ Windows\ system32\ CertLog"-whatif / / non-installation only

Install-AdcsCertificationAuthority-CAType EnterpriseRootCa-ValidityPeriod Years-ValidityPeriodUnits 99-DatabaseDirectory "D:\ Windows\ system32\ CertLog"-LogDirectory "D:\ Windows\ system32\ CertLog" / / install CA

Install-AdcsWebEnrollment

Ninstall-AdcsCertificationAuthority-Force

Set-NetFirewallProfile-Profile Domain-Enabled False / / turn off the domain firewall for reference only

This article has been completed!