Differences between revisions 24 and 39 (spanning 15 versions)
⇤ ← Revision 24 as of 2021-10-21 20:29:53 →
Size: 2648
Editor: scot
Comment:
← Revision 39 as of 2023-11-02 19:23:57 → ⇥
Size: 2119
Editor: scot
Comment:
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:
 1. Install a AD Certificate server on CPTE230A.  1. Install a AD Certificate server on CPTR230A.
Line 6: Line 6:
 1. Install IIS with an X.508 certificate for your default site on CPTE230A
    1. Install IIS 10 (include the management service)
    1. See [[https://docs.microsoft.com/en-us/iis/manage/remote-administration/remote-administration-for-iis-manager|remote administration]] docs.
    1. If not installed on the Windows Client, install IIS management Console from [[https://www.microsoft.com/en-us/download/details.aspx?id=41177|here]].
       a. Although this is nice to have on hand, and we will use it later, you will have to use the GUI installed on the server (along with the feature on demand: AppCompatibility see [[https://docs.microsoft.com/en-us/windows-server/get-started/server-core-app-compatibility-feature-on-demand|here]])
       a. Remember that even with the AppCompatibilty package installed, you do not have the ability to use a file browser. Do not use the ellipses to select a file or the MMC will crash.
    1. With the Server selected in the navigation pane, double click the Server Certificates icon in the central details pane.
    1. Click on: Create a Certificate Request... in the action pane.
    1. Make sure to use your full hostname for the common name. E.g. I used "cpte230b.scot.anderson.internal"
    1. Copy the file CPTE230A. 		 1. Install IIS with an X.509 certificate for your default site on CPTR230A
    1. Install IIS Latest (include the management service)
    1. '''Only if you are using Core''' - [[IISInstallCertificateFromCommandLine]]. If you take this option, you will complete everything but the next item, which you do need!
    1. '''Only if you are using Core''' - See [[https://docs.microsoft.com/en-us/iis/manage/remote-administration/remote-administration-for-iis-manager|remote administration]] docs.
    1. Using IIS Admin Console: With the Server selected in the navigation pane, double click the Server Certificates icon in the central details pane.
    1. Click on: "Create Domain Certificate..." in the action pane.
    1. Make sure to use your full hostname for the common name. E.g. I used "cptr230a.scot.internal"
 1. Click on your default web site to bind the certificate to your website.
    1. Click on Bindings, and click on ADD
    1. Add a binding for https and select the certificate that you just created.

{{{#!wiki comment
Line 21: Line 23:
 1. Click on your default web site to bind the certificate to your website.
    1. Click on Bindings, and click on ADD
    1. Add a binding for https and select the certificate that you just imported. 		}}}
Line 34: Line 34:

CPTE 230B (192.168.1.3)
Line 38: Line 35:

Note we will be installing a webservice on CPTE 230 B in the next lab.

Lab 07

Perform the following

  1. Install a AD Certificate server on CPTR230A.
    1. I used all defaults for my AD Certificate server as a Enterprise Root CA.
  2. Install IIS with an X.509 certificate for your default site on CPTR230A
    1. Install IIS Latest (include the management service)

    2. Only if you are using Core - IISInstallCertificateFromCommandLine. If you take this option, you will complete everything but the next item, which you do need!

    3. Only if you are using Core - See remote administration docs.

    4. Using IIS Admin Console: With the Server selected in the navigation pane, double click the Server Certificates icon in the central details pane.
    5. Click on: "Create Domain Certificate..." in the action pane.
    6. Make sure to use your full hostname for the common name. E.g. I used "cptr230a.scot.internal"
  3. Click on your default web site to bind the certificate to your website.
    1. Click on Bindings, and click on ADD
    2. Add a binding for https and select the certificate that you just created.

This will create a file containing you certificate to install.

  1. Copy the certificate file to your CPTE230B machine.
  2. Click on "Complete Certificate Request..."
  3. Select the certificate file you copied from CPTE230A
    1. Choose type as Web Hosting.

}}}

Document the new services for each server on a new page named services I.e.

Services Installed:

CPTE230A (192.168.1.2)

  • AD Certificate Authority
  • IIS (With SSL Certificate from AD Cert. Auth.)

Video Grade Guide

Topics

Points

Video shows the Certificate Server and certificates issued on CPTE230A

30

Video shows a website showing certificate, and that it is trusted by your browser.

60

Video talks through the documentation

10

WindowsAdministration/Lab07WebServerInstall (last edited 2024-10-31 18:24:29 by scot)