Windows Server 2008 Standard certificate usage record

Recently you are ready to upgrade your units to Windows Server 2008, but there are some "legacy" issues to resolve:

(1) Now the unit also has a Windows Server 2003, which has installed a "standard CA" and a Certificate server, for ISA Server, heuet.com and other sites to provide domain names and other certificates.

(2) Windows Server 2003 installs the Windows Deployment service, which is used to provide remote Installation services.

(3) using ISA Server as a "VPN" and "Enterprise CA" making "smart cards" to issue certificates.

Now gradually upgrading Windows Server 2003 to 2008, test the difference between the standard CA in Windows Server 2008 and the standard CA provided by Windows Server 2003 to see if it can be upgraded.

The main test environment is as follows:

Prepare a Windows Server 2008 virtual machine, install Certificate Services, and request a user certificate, computer certificate, to see if the 1th condition can be met.

Main testing Process:

1 Installing Certificate Services

(1) In a Windows Server 2008 virtual machine (IIS not installed, not upgraded to AD, no other task service is installed), go to Server Manager, navigate to role, click Add Role in the right pane, as shown in Figure 1.

Figure 1 Adding a role

(2) on the Select Server Role page, select Active Directory Certificate Services, as shown in Figure 2.

Figure 2 Certificate Services

"description" You should never be "intimidated" by "Active Directory" prefixes, although the name "Active Directory Certificate Services" does not necessarily mean that this requires Active Directory support. Keep looking, you'll understand.

(3) On the Select Role Service page, add the certification authority, certification authority Web enrollment, Online Responder, and when you select Certification authority Web enrollment, pop-up the Add IIS dialog box, and click Add Required role services to automatically add the required IIS services. As shown in Figure 3.

Figure 3 Adding a role