Lync server 2013 practice 4: Certificate Server installation and configuration

Windows Certificate Service has two main applications in lync: client trust and communication encryption.

This project uses Ca and is stored in the Active Directory Server. You need to install the Active Directory Certificate Service, if you are using a new domain, first install the Windows Server Active Directory (see the Windows Server 2012 Active Directory installation ). The following uses Windows Server 2012 as an example.

1. Install the Active Directory Component

1.1 open the dashboard in windwos server 2012 Server Manager and choose "before start"> "Next]

650) This. width = 650; "Title =" clip_image002 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image002 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919987s0ej.jpg "Height =" 385 "/>

1.2 select role-based or function-based installation in [installation type] and [next]

650) This. width = 650; "Title =" clip_image004 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image004 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919988GoyC.jpg "Height =" 380 "/>

1.3 Select Server from server pool in server selection, select the server on which the certificate is to be installed, and click Next]

650) This. width = 650; "Title =" clip_image006 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image006 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919988X8Xw.jpg "Height =" 388 "/>

1.4 select active dirctory Certificate Service, click Add function in the displayed dialog box, and click Next ],

Next step]

650) This. width = 650; "Title =" clip_image008 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image008 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919989tzUh.jpg "Height =" 371 "/>

1.5 on the ad CS introduction page, click Next.

Note: After the ad certificate service is installed, you cannot change the computer name and domain settings.

650) This. width = 650; "Title =" clip_image010 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image010 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919989z8Vz.jpg "Height =" 362 "/>

1.6 In the role Service Selection of the certificate, select the Certificate Authority and Certificate Authority web registration]

650) This. width = 650; "Title =" clip_image012 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image012 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919990IDnj.jpg "Height =" 374 "/>

1.7 click Add function and next]

650) This. width = 650; "Title =" clip_image014 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image014 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919991TH02.jpg "Height =" 359 "/>

1.8 click [next] on the [Web Server role IIS] Page]

650) This. width = 650; "Title =" clip_image016 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image016 "src =" http://img1.51cto.com/attachment/201409/17/468619_14109199910ou3.jpg "Height =" 348 "/>

1.9 retain the default value in the web server role service selection.

650) This. width = 650; "Title =" clip_image018 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image018 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919992aAxp.jpg "Height =" 336 "/>

Ii. Active Directory certificate service configuration

2.0 after confirming that the Active Directory Certificate Service component has been installed, click Configure Active Directory certificate service on the target server]

650) This. width = 650; "Title =" clip_image020 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image020 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919992nFAH.jpg "Height =" 363 "/>

2.1 specify the certificate service administrator. Select default here

650) This. width = 650; "Title =" clip_image022 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image022 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919993LLZ7.jpg "Height =" 397 "/>

2.2 In role service, select the role service to be configured, and select Certificate Authority and Certificate Authority web registration]

650) This. width = 650; "Title =" clip_image024 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image024 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919993DJuB.jpg "Height =" 406 "/>

2.3 select Enterprise CA in [set type of the specified Ca]

650) This. width = 650; "Title =" clip_image026 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image026 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919994q6LX.jpg "Height =" 403 "/>

2.4 select Root CA in [specify ca type]

650) This. width = 650; "Title =" clip_image028 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image028 "src =" http://img1.51cto.com/attachment/201409/17/468619_14109199957b4h.jpg "Height =" 393 "/>

2.5 select [Create new private key] under [specify private key type]

650) This. width = 650; "Title =" clip_image030 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image030 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919995SKD0.jpg "Height =" 383 "/>

2.6 if you have no special requirements in [specify encryption options], keep the default value.

650) This. width = 650; "Title =" clip_image032 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image032 "src =" http://img1.51cto.com/attachment/201409/17/468619_141091999601j6.jpg "Height =" 375 "/>

2.7 modify the CA name as needed.

650) This. width = 650; "Title =" clip_image034 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image034 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919996NvQo.jpg "Height =" 365 "/>

2.8 The certificate generated is valid for 5 years by default.

650) This. width = 650; "Title =" clip_image036 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image036 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919997T3ly.jpg "Height =" 369 "/>

2.9 set the default location of the Book Service Database

650) This. width = 650; "Title =" clip_image038 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image038 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919997V7Jj.jpg "Height =" 371 "/>

2.10 click Configure to complete the configuration of the Certificate Server

650) This. width = 650; "Title =" clip_image040 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image040 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919998UKr0.jpg "Height =" 352 "/>

650) This. width = 650; "Title =" clip_image042 "style =" border-top: 0px; border-Right: 0px; Background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; padding-Right: 0px; "Border =" 0 "alt =" clip_image042 "src =" http://img1.51cto.com/attachment/201409/17/468619_1410919998MLnm.jpg "Height =" 355 "/>

This article from the "snow" blog, please be sure to keep this source http://pjj1020.blog.51cto.com/468619/1553610

Lync server 2013 practice 4: Certificate Server installation and configuration