Update Workflows/Windows/Windows Server/Roles/Active Directory Certificate Services/Deployment.md
All checks were successful
GitOps Automatic Deployment / GitOps Automatic Deployment (push) Successful in 7s

This commit is contained in:
2025-07-11 19:47:02 -06:00
parent e28d194fac
commit a24c17292d

View File

@ -15,7 +15,7 @@ This document outlines the Microsoft-recommended best practices for deploying a
- Ensure the timezone is correctly configured
- Ensure the hostname is correctly configured
### Offline Root CA `LAB-CA-01` Role Deployment
### Offline (Non-Domain-Joined) Root CA `LAB-CA-01` Role Deployment
- Provision a **non-domain-joined** Windows Server
- This is critical that this device is not domain-joined for security purposes
- Navigate to "**Server Manager > Manage > Add Roles and Features**"
@ -32,7 +32,7 @@ This document outlines the Microsoft-recommended best practices for deploying a
- Click "**Next**" > "**Next**" > "**Next**" > "**Install**"
- Restart the Server
### Offline Root CA `LAB-CA-01` Role Configuration
### Offline (Non-Domain-Joined) Root CA `LAB-CA-01` Role Configuration
- Navigate to "**Server Manager > (Alert Flag) > Post-deployment Configuration: Active Directory Certificate Services**"
- You will be prompted for an admin user, in this example, you will use the pre-populated `LAB-CA-01\Administrator`
- Check the boxes for `Certification Authority` and `Certification Authority Web Enrollment` then click "**Next**"
@ -67,6 +67,14 @@ You will see a finalization screen confirming everything we have configured, it
!!! success "Active Directory Certificate Services"
If everything went well, you will see that the "**Certificate Authority**" and "**Certification Authority Web Enrollment**" both have a status of "**Configuration succeeded**". At this point, you can click the "**Close**" button to conclude the Root CA configuration.
### Online (Domain-Joined) Subordinate/Intermediary CA `LAB-CA-02` Role Deployment
!!! warning "Under Construction"
Section is still being written during lab deployment.
### Online (Domain-Joined) Subordinate/Intermediary CA `LAB-CA-02` Configuration Deployment
!!! warning "Under Construction"
Section is still being written during lab deployment.
!!! warning "Raw Unprocessed Documentation - Do Not Use"
- `Certificate Enrollment Policy Web Service`
- `Certificate Enrollment Web Service`