Windows Server 2022: Active Directory Certificate Services (AD CS) Discussion and Install Guide
Channel: SW The Tech Journal
Date: 2021-10-11

Skip straight to the demo at 04:39
See more info by clicking SHOW MORE below!

Blog Post: https://www.stephenwagner.com/2021/10/11/active-directory-certificate-services-discussion-install-guide/

Check out my full Windows Server 2022 playlist at https://www.youtube.com/watch?v=JRusmtz2Hbs&list=PLCj5wrUCPIG6j-AGEHJzqMiPrA2vHXRT_

In this video we'll discuss Active Directory Certificate Services, and then demonstrate and install Active Directory Certificate Services on a Windows Server 2022 Server.

Timecodes:
00:09 - Discussion
04:39 - Demonstration

In this video:

1. Discussion
-SSL Certificates (Host verification)
-Internal Root Certification Authorities (Root CAs)
-Internal Root CA vs Public Trusted Root CAs
-HTTPS Scanning (Web Filtering) and SSL Certificates
-Intermediate Certificate Authorities
-Why ADCS?
-AD CS Certificate Templates
-Encryption
-Certificate Issuance

2. Demonstration
-Server Manager Role Installation
-MMC Snap-in for Certificates (Local Computer)
--Root CAs
-Install Active Directory Certificate Services (AD CS)
--Add Server Role
--Root CA Trust Discussion
--AD CS Installation on Domain Controller Installation
--AD CS Prerequisites
--Web Enrollment Discussion
--AD CS and IIS Discussion
-Install Internet Information Services (IIS) as pre-requisite
-Configure Active Directory Certificate Services (AD CS)
--Credentials
--Role Configuration
--Enterprise CA vs Standalone CA
--Root CA vs Subordinate CA
--Private Key Creation and Cryptographic options
--Root CA Naming
--Validity Period
-Certification Authority MMC Usage
-Root CA Replication to Domain ("gpupdate /force" and restart)
-AD CS Certificate Templates Overview
--Certificate Templates MMC
--Duplicate and Customize Web Server Certificate Template
--Enable Auto-Enrollment for Certificate Template
-Use IIS to request certificate from Active Directory Certification Authority
--Create Domain Certificate
-Enable SSL on WSUS Server using Active Directory Certificate Services Certificate
--Bind new certificate to IIS Web Server
--Update GPO to reflect SSL URL and port number
--Run "iisreset" on elevated command prompt
-Demonstration Summary

This video is part of a multi-video playlist containing howto's on deploying various technologies with Microsoft Windows Server 2022.

Hardware/Software used in this demonstration
-VMware vSphere
-HPE DL360p Gen8 Server
-Microsoft Windows Server 2022
-pfSense Firewall

For more content visit my blogs at https://www.stephenwagner.com

To hire me and my company, visit:
https://www.stephenwagner.com/hire-stephen-wagner-it-services/
https://www.digitallyaccurate.com/contact-us/

#Windows #WindowsServer #WindowsServer2022 #WSUS #WindowsServiceUpdateServices #Guide #HowTo #VMware #ESXi #VirtualMachine #Demo #Demonstration #ADCS #Certificates #SSL