Lab 07

Perform the following

1. Install a AD Certificate server on CPTR230A.
   1. I used all defaults for my AD Certificate server as a Enterprise Root CA.
2. Install IIS with an X.509 certificate for your default site on CPTR230A
   1. Install IIS Latest (include the management service)

   2. Optionally IISInstallCertificateFromCommandLine. If you take this option, you will complete everything but the next item, which you do need!

   3. See remote administration docs.

   4. With the Server selected in the navigation pane, double click the Server Certificates icon in the central details pane.
   5. Click on: Create a Certificate Request... in the action pane.
   6. Make sure to use your full hostname for the common name. E.g. I used "cptr230a.scot.internal"

   7. From a command prompt type: certreq -submit -attrib “CertificateTemplate:WebServer” “C:\...\cert.req” This will create a file containing you certificate to install.

   8. Copy the certificate file to your CPTE230B machine.
   9. Click on "Complete Certificate Request..."
   10. Select the certificate file you copied from CPTE230A
       1. Choose type as Web Hosting.
3. Click on your default web site to bind the certificate to your website.
   1. Click on Bindings, and click on ADD
   2. Add a binding for https and select the certificate that you just imported.

Document the new services for each server on a new page named services I.e.

Services Installed:

CPTE230A (192.168.1.2)

• AD Certificate Authority
• IIS (With SSL Certificate from AD Cert. Auth.)

Video Grade Guide