June 2017
Beginner to intermediate
742 pages
18h 29m
English
Content preview from Mastering Active Directory
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Setting up the issuing CA
Now that we finished with the root CA setup, the next step is to set up the issuing CA. Issuing CAs will be running from a domain member server and will be AD integrated. In order to perform the installation, log into the server as the Domain Admin or Enterprise Admin.
First task will be to install the AD CS role:
Add-WindowsFeature ADCS-Cert-Authority -IncludeManagementTools
I will use the same server for the web enrollment role service from the same service. So, it can be added using the following command:
Add-WindowsFeature ADCS-web-enrollment
After that, we can configure the role service using the following command:
Install-ADcsCertificationAuthority -CACommonName "REBELAdmin IssuingCA" -CAType EnterpriseSubordinateCA ...