Server Certificate Deployment

• Koskee seuraavia::

  ✅ Windows Server 2025, ✅ Windows Server 2022, ✅ Windows Server 2019, ✅ Windows Server 2016

Follow these steps to install an enterprise root certification authority (CA) and to deploy server certificates for use with PEAP and EAP.

Important

Before you install Active Directory Certificate Services, you must name the computer, configure the computer with a static IP address, and join the computer to the domain. After you install AD CS, you cannot change the computer name or the domain membership of the computer, however you can change the IP address if needed. For more information on how to accomplish these tasks, see the Windows Server® 2016 Core Network Guide.

• Install the Web Server WEB1

• Create an alias (CNAME) record in DNS for WEB1

• Configure WEB1 to distribute Certificate Revocation Lists (CRLs)

• Prepare the CAPolicy inf file

• Install the Certification Authority

• Configure the CDP and AIA extensions on CA1

• Copy the CA certificate and CRL to the virtual directory

• Configure the server certificate template

• Configure server certificate autoenrollment

• Refresh Group Policy

• Verify Server Enrollment of a Server Certificate

Note

The procedures in this guide do not include instructions for cases in which the User Account Control dialog box opens to request your permission to continue. If this dialog box opens while you are performing the procedures in this guide, and if the dialog box was opened in response to your actions, click Continue.