bunny-lab/docs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update Workflows/Windows/Windows Server/Roles/Active Directory Certificate Services/Deployment.md
All checks were successful
GitOps Automatic Deployment / GitOps Automatic Deployment (push) Successful in 7s
Details

Browse Source
This commit is contained in:
Nicole Rappe
2025-07-11 18:00:12 -06:00
parent ba326426ec
commit 94827fc1ce
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
Workflows/Windows/Windows Server/Roles/Active Directory Certificate Services/Deployment.md
View File

@ -41,11 +41,12 @@ This document outlines the Microsoft-recommended best practices for deploying a
- Check the "**Standalone CA**" radio box then click "**Next**" - Check the "**Standalone CA**" radio box then click "**Next**"
- Check the "**Root CA** radio box then click "**Next**" - Check the "**Root CA** radio box then click "**Next**"
- Check the "**Create a new private key**" radio box then click "**Next**" - Check the "**Create a new private key**" radio box then click "**Next**"
- - Click the dropdown menu for "**Select a crypotographic provider**" and ensure that "**RSA#Microsoft Software Key Storage Provider**" is selected
- Set the key length to `4096`
- Set the hash algorithm to SHA256
!!! warning "Raw Unprocessed Documentation - Do Not Use" !!! warning "Raw Unprocessed Documentation - Do Not Use"
Install AD CS role as a Standalone Root CA. 3. 10-year validity.
3. Use RSA 4096-bit key, SHA-256, 10-year validity.
4. Configure AIA and CDP extensions with HTTP paths. 4. Configure AIA and CDP extensions with HTTP paths.
5. Publish root cert and CRL to AD and internal HTTP. 5. Publish root cert and CRL to AD and internal HTTP.
3. Online Subordinate CA Setup 3. Online Subordinate CA Setup