Configure Certificate for Web Server 2022
Donate Us : paypal.me/MicrosoftLab
Configure Certificate for Web Server 2022
1. Prepare
DC21 : Domain Controller (Yi.vn) | DC22 : Certificate Server(10.0.0.22) | DC23 : Web Server(10.0.0.23) | WIN111 : Client
2. Step by step : Configure certificate for DC23 (web server) -------------------------******************** / microsoftlab ********************----------------------
DC21 : Create a record DNS point www.Yi.vn to 10.0.0.23
DC23 : Install IIS and create a Website text simple
Server Manager - Manage - Add Roles and Features - Next to 'Server Roles' - Select 'Web Server (IIS)' - Add Features - Next to - Install - Close
Create a folder "WEB" on C, create a Website text simple
Server Manager - Tools - Internet Information Services (IIS) Manager - DC23 - Site - Right-Click 'Default Web Site' - remove - Yes - Right-Click Sites - Add Website... :
Site name : WEB | Physical path : C:\WEB | Host name : www.Yi.vn - OK
WIN111 : Test Website. Click 'Microsoft Edge' - http://www.Yi.vn === OK
DC22 : Install and configure Certificate Services
Server Manager - Manage - Add Roles and Features - Next to Server Roles : Select "Active Directory Certificate Services" - Add Features
Next to Role Services : Select "Certification Authority" + "Certification Authority Web Enrollment" - Add Features - Install
Notifications - Congifure Active Directory Certificate Services on the distination server - Role Service : Select "Certification Authority" + "Certification Authority Web Enrollment"
Setup Type : Standalone CA - Next to CA Name : Common name for this CA : Yi-CA - Next to Configure - Close
DC23 : Request Certificate
Internet Information Services (IIS) Manager - DC23 - Server Certificates - Create Certificate Request...
Common name : Certificate for Web | Organization : Yi | Organizational unit : IT | City/locality : HANOI | State/Province : HOANKIEM | Country/region : VN
Next to File Name : Specify a file name for the certificate request : - Browse to Desktop - CA.txt - Open - Finish
Interner Explorer - http://10.0.0.22/certsrv/ - Request a certificate - advanced certificate request
Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file
Base-64-encoded certificate request (CMC or PKCS #10 or PKCS #7): Copy and paste all file CA.txt - Submit
DC22 : Issue for request from DC23
Server Manager - Tools - Certification Authority - Yi-CA - Pending Requests - Right-click Certificate Request - All Tasks - Issue
DC23 : Download and import certificates
Interner Explorer - http://10.0.0.22/certsrv/ - View the status of a pending certificate request - Saved-Request Certificate - Download all
Start - MMC - File - Add, Remove Snap-in...- Certificates - Add - My user account - Finish - Console Root - Certificate - Current User
Trusted Root Certification Authorities - Right-click Certificates - All Tasks - Import... - Browse... certnew.cer - Finish (do the same for certnew.p7b)
Internet Information Services (IIS) Manager - DC23 - Server Certificates - Complete Certificate Request... :
File name containing... : Browse to certnew.cer | Friendly name : Certificate for Web
Right-click WEB - Edit Bindings... - Add... - Type : https, Host name : www.Yi.vn , SSL certificate - Select... - Certificate for Web
Remove type http
WIN111 : Test access Web. Microsoft Edge :
http://www.Yi.vn === Fail + https://www.Yi.vn === OK with warning certificate ^^
Watch video Configure Certificate for Web Server 2022 online without registration, duration hours minute second in high quality. This video was added by user microsoft lab 08 January 2023, don't forget to share it with your friends and acquaintances, it has been viewed on our site 1,146 once and liked it 16 people.