Instalace ADCS na Server Core

Instalace ADCS na Server Core

Nejdřív nainstalovat IIS

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
Add-WindowsFeature Web-Server, Web-Mgmt-Console, Web-Http-Redirect, Web-Url-Auth, Web-Windows-Auth, Web-ASP, Web-CGI, Web-ISAPI-Filter, Web-ISAPI-Ext, Web-Net-Ext45, Web-Mgmt-Service
Add-WindowsFeature Web-Server, Web-Mgmt-Console, Web-Http-Redirect, Web-Url-Auth, Web-Windows-Auth, Web-ASP, Web-CGI, Web-ISAPI-Filter, Web-ISAPI-Ext, Web-Net-Ext45, Web-Mgmt-Service
Add-WindowsFeature Web-Server, Web-Mgmt-Console, Web-Http-Redirect, Web-Url-Auth, Web-Windows-Auth, Web-ASP, Web-CGI, Web-ISAPI-Filter, Web-ISAPI-Ext, Web-Net-Ext45, Web-Mgmt-Service

Konzole se dá spustit

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
C:\Windows\System32\InetSrv\InetMgr.exe
C:\Windows\System32\InetSrv\InetMgr.exe
C:\Windows\System32\InetSrv\InetMgr.exe

Instalace role

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
Add-WindowsFeature Adcs-Cert-Authority -IncludeManagementTools
Add-WindowsFeature Adcs-Web-Enrollment
Add-WindowsFeature Adcs-Cert-Authority -IncludeManagementTools Add-WindowsFeature Adcs-Web-Enrollment
Add-WindowsFeature Adcs-Cert-Authority -IncludeManagementTools
Add-WindowsFeature Adcs-Web-Enrollment

Konfigurace

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
Install-AdcsCertificationAuthority -CACommonName "DOMAIN-CA" -CAType EnterpriseRootCA -DatabaseDirectory "E:\CertDb" -LogDirectory "E:\CertLog" -ValidityPeriodUnits 10
Install-AdcsCertificationAuthority -CACommonName "DOMAIN-CA" -CAType EnterpriseRootCA -DatabaseDirectory "E:\CertDb" -LogDirectory "E:\CertLog" -ValidityPeriodUnits 10
Install-AdcsCertificationAuthority -CACommonName "DOMAIN-CA" -CAType EnterpriseRootCA -DatabaseDirectory "E:\CertDb" -LogDirectory "E:\CertLog" -ValidityPeriodUnits 10

Konfigurace web enrollmentu

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
Install-ADCSWebEnrollment
Install-ADCSWebEnrollment
Install-ADCSWebEnrollment

Aby bylo možné vytvářet delší certifikáty než s dvouletou platností, je nutné

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
certutil -setreg ca\ValidityPeriodUnits 5
certutil -setreg ca\ValidityPeriodUnits 5
certutil -setreg ca\ValidityPeriodUnits 5
Štítky:

Napsat komentář