Sign Oklahoma Work Order Secure

Document type sign work order oklahoma secure

hi everyone in this video I'm going to walk through activity 9 - 5 titled installing the web enrollment roll service this is from the MC SC / MCS a guide to configuring advanced Microsoft Windows Server 2012 r2 services in preparation of exam 70 - 412 in my edition of the book this activity begins on page 353 so a quick background we have our domain controller setup on server 1 we have a second server which is our certificate authority and then I have just a client machine on the domain so server 2 is also a domain member so we have the role for the certification authority installed and set up on the server so it's one of the previous activities we made sure that it could issue certificates and we tested that it served a certificate both to my domain controller the machine itself and then to a test user as well so in this activity we want to do it so that we can issue certificates through web enrolment instead of doing it through auto enrolment which is how we have it set up right now so we should still have an option here if you're following along the book we installed the role but we haven't configured it really so that's what we want to do next so we'll use the current credentials which is fine and we want to configure the web enrollment CA I'm gonna go ahead and configure it once that's done we'll close this it'll probably prompt us to configure the last one that we have set up we're not ready to configure that yet so we're gonna say no so in order to provide certificates iis must have a web server certificate itself so we need to request one for it so we're gonna go to Tools Internet Information Services iis once that comes up we'll select server to which is the server that's acting as the CA so we just left click on the server over here on the left with you receive this prompt just go ahead and hit and now in a real live environment you might want to go that route and explore it for just testing purposes we're gonna skip it for now so in our center console let me go ahead and make this larger so we can see everything we want to select the server certificates right here so we'll double click that and then we want to create a domain certificate here on the right in the actions pane all right so we're gonna run through all of this you following along in the book we're going to use the server fully qualified domain name so in this case it's 412 server 2.4 12 dom one local if you're in a live environment you'll want to use the fully qualified domain name of your server so you have server name first and then your full domain where it resides organization again if you're in a live environment you'll want to actually put an organization here for testing purposes we're going to call it server organizational unit I'm just going to drop my name in here out you you you there we go button we're going to select our CA in the friendly name box we're going to go ahead and give it D fully Paul and then once this finish is we're going to come over and look into ours you so once that completes it will automatically close itself we can see it listed here eight snowed you once that expands we want to expand the default website you so we'll right-click on the default website here you and edit bind bindings we want to add a new bite in the type we want to select HTTP and then the SSL certificate we want to select this drop down and point we're going to go and point to the friendly name that we gave the fully qualified domain name of the CA server go ahead and hit OK and we should see it listed on port 443 which is HTTPS which is good so we'll go and close that and then we have the cert serve here I'm going to go ahead and select that and then in the middle pane we're gonna double click the SSL settings to open that up we want to go ahead and tell it to require SSL note that under the options here we can have the web server ignore accept or require client certificates if you want client computers connecting to the web server to verify their identity you would select require for testing purposes I'm going to leave it on ignore because it doesn't really matter in a test environment right now so I'm gonna hit apply and then we want to go ahead and test our configuration so we're going to be on our Windows 8 machine logged in as a domain user and we're going to go ahead and open Internet explorer and we're going to give the URL is going to be that HTTP and then we're going to direct it to the friendly name for 4:12 server - which is the fully qualified domain name and we want to put forward slash that cert s SRV let me get my mouse out of the way there like that I wouldn't browse there once it connects it should prompt for your credentials so we're going to go ahead and use our test user all right and so give us some quick information that we can request a certificate for our web browser or email all other programs that we can verify our identity to be we communicate over the web etc and so we're gonna go ahead and hit the link to request us right there so want to select a geezer certificate we're gonna go ahead and run that control sign-in again I'm going to go ahead and tell it yes to allow it to perform the digital certification certificate operation and then we'll see that when no further identifying information is required if you're using a non administrator user you may not be able to get this far using Active Directory I would recommend setting this user as a member of the administrators group first before signing in on this machine that way you can get all the way through all of this so we're gonna go ahead and hit submit we're going to tell it yes again and then we're going to tell it to install this certificate it may automatically install if it doesn't it'll prompt you to save it first if it does prompt you to save go ahead and save it to like your downloads folder and then you can view it from there mostly that covers everything from the activity I understand that was kind of fast and a little bit jumpy but as always if you have any questions comments or concerns please feel free to leave them for me below I will try to reply in a timely fashion thank you so much for watching