Upgrading your PKI to Windows Server 2012 Part III (Video)

This video is Part 3 in a 4 part video series on the steps required to upgrade an existing PKI from Windows Server 2003 to Windows Server 2012.  Although the steps demonstrated cover upgrading Windows Server 2003, the same steps could be used to upgrade Windows Server 2008 or Windows Server 2008 R2 to Windows…

0

Upgrading your PKI to Windows Server 2012 Part II (Video)

This video is Part 2 in a 4 part video series on the steps required to upgrade an existing PKI from Windows Server 2003 to Windows Server 2012.  Although the steps demonstrated cover upgrading Windows Server 2003, the same steps could be used to upgrade Windows Server 2008 or Windows Server 2008 R2 to Windows Server…

0

Upgrading your PKI to Windows Server 2012 Part I (Video)

This video is Part 1 in a 4 part video series on the steps required to upgrade an existing PKI from Windows Server 2003 to Windows Server 2012.  Although the steps demonstrated cover upgrading Windows Server 2003, the same steps could be used to upgrade Windows Server 2008 or Windows Server 2008 R2 to Windows…

0

New Active Directory Certificate Services (PKI) Features in Windows Server 2012

New Features Below are a list of several new features available in Active Directory Certificate Services in Windows Server 2012.  Additional information on new features in ADCS can be found here: http://technet.microsoft.com/en-us/library/hh831373.aspx Deployment with Server Manager: Active Directory Certificate Services (ADCS) as well as all other roles are deployed through Server Manager.  I covered the…

0

Installing a Two Tier PKI Hierarchy in Windows Server 2012 Wrap Up

After nine blog postings I have decided to wrap up the Installing a Two Tier PKI Hierarchy in Windows Server 2012 Blog Series.  Stay tuned for upcoming content.  I am going to add blog postings focusing on enrollment, new features, and maybe touch on some other technologies outside of PKI/Certificate Services. Here are links to…

3

Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part IX, Configuring High Availability for the HTTP AIA and CDP Repositories

AIA and CDP Repositories are very important for certificate validation.  The Authority Information Access or AIA repository host CA Certificates.  This location is “stamped” in the Authority Information Access extension of issued certificates.  A client that is validating a certificate may not have every CA certificate in the chain.  The client needs to build the…

0

Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part VIII, PKI Security

So, now that we have walked through configuring our Windows 2012 based PKI, let’s discuss securing this new environment.  Security Considerations for a Root CA So, we setup a Root CA.  A best practice for a PKI is to have the Root CA Offline.  In other words the Root CA should never be connected to…

0

Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part VII, Enabling SSL on the Web Enrollment Website

In this installment of this blog series, I will cover enabling SSL on the Web Enrollment website.  If you are new to Active Directory Certificate Services this blog will also give you an idea of what’s involved in issuing certificates.  Duplicating the Web Server Certificate Template A best practice is to duplicate Certificate Templates instead…

0

Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part VI, Post Configuration of an Enterprise Subordinate Certification Authority

In the last episode of this blog series I installed an Enterprise Subordinate CA.  In this episode I am going to perform post configuration of this CA.  So, let’s first sum up where I am with my setup.  I have installed my Root and Subordinate CA.  I have configured the Root CA.  I am using…

0

Installing a Two Tier PKI Hierarchy in Windows Server 2012: Part V, Installing an Enterprise Subordinate Certification Authority and Web Enrollment with PowerShell

In the previous blog postings for this series I covered installing the Root Certification Authority, configuring the Root Certification Authority, and publishing the Root CA Certificate and CRL to Active Directory.  In this installment I am going to cover installing an Enterprise Subordinate CA with PowerShell.  In this example I am going to install a…

0