Configure Certificate for Web Server 2022
Donate Us : paypal.me/MicrosoftLab
Configure Certificate for Web Server 2022
1. Prepare
DC21 : Domain Controller (Yi.vn) | DC22 : Certificate Server(10.0.0.22) | DC23 : Web Server(10.0.0.23) | WIN111 : Client
2. Step by step : Configure certificate for DC23 (web server) -------------------------******************** / microsoftlab ********************----------------------
DC21 : Create a record DNS point www.Yi.vn to 10.0.0.23
DC23 : Install IIS and create a Website text simple
Server Manager - Manage - Add Roles and Features - Next to 'Server Roles' - Select 'Web Server (IIS)' - Add Features - Next to - Install - Close
Create a folder "WEB" on C, create a Website text simple
Server Manager - Tools - Internet Information Services (IIS) Manager - DC23 - Site - Right-Click 'Default Web Site' - remove - Yes - Right-Click Sites - Add Website... :
Site name : WEB | Physical path : C:\WEB | Host name : www.Yi.vn - OK
WIN111 : Test Website. Click 'Microsoft Edge' - http://www.Yi.vn === OK
DC22 : Install and configure Certificate Services
Server Manager - Manage - Add Roles and Features - Next to Server Roles : Select "Active Directory Certificate Services" - Add Features
Next to Role Services : Select "Certification Authority" + "Certification Authority Web Enrollment" - Add Features - Install
Notifications - Congifure Active Directory Certificate Services on the distination server - Role Service : Select "Certification Authority" + "Certification Authority Web Enrollment"
Setup Type : Standalone CA - Next to CA Name : Common name for this CA : Yi-CA - Next to Configure - Close
DC23 : Request Certificate
Internet Information Services (IIS) Manager - DC23 - Server Certificates - Create Certificate Request...
Common name : Certificate for Web | Organization : Yi | Organizational unit : IT | City/locality : HANOI | State/Province : HOANKIEM | Country/region : VN
Next to File Name : Specify a file name for the certificate request : - Browse to Desktop - CA.txt - Open - Finish
Interner Explorer - http://10.0.0.22/certsrv/ - Request a certificate - advanced certificate request
Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file
Base-64-encoded certificate request (CMC or PKCS #10 or PKCS #7): Copy and paste all file CA.txt - Submit
DC22 : Issue for request from DC23
Server Manager - Tools - Certification Authority - Yi-CA - Pending Requests - Right-click Certificate Request - All Tasks - Issue
DC23 : Download and import certificates
Interner Explorer - http://10.0.0.22/certsrv/ - View the status of a pending certificate request - Saved-Request Certificate - Download all
Start - MMC - File - Add, Remove Snap-in...- Certificates - Add - My user account - Finish - Console Root - Certificate - Current User
Trusted Root Certification Authorities - Right-click Certificates - All Tasks - Import... - Browse... certnew.cer - Finish (do the same for certnew.p7b)
Internet Information Services (IIS) Manager - DC23 - Server Certificates - Complete Certificate Request... :
File name containing... : Browse to certnew.cer | Friendly name : Certificate for Web
Right-click WEB - Edit Bindings... - Add... - Type : https, Host name : www.Yi.vn , SSL certificate - Select... - Certificate for Web
Remove type http
WIN111 : Test access Web. Microsoft Edge :
http://www.Yi.vn === Fail + https://www.Yi.vn === OK with warning certificate ^^
Смотрите видео Configure Certificate for Web Server 2022 онлайн без регистрации, длительностью часов минут секунд в хорошем качестве. Это видео добавил пользователь microsoft lab 08 Январь 2023, не забудьте поделиться им ссылкой с друзьями и знакомыми, на нашем сайте его посмотрели 1,146 раз и оно понравилось 16 людям.