diff --git a/Workflows/Windows/Windows Server/Roles/Active Directory Certificate Services/Deployment.md b/Workflows/Windows/Windows Server/Roles/Active Directory Certificate Services/Deployment.md index c3e91f3..2aa5684 100644 --- a/Workflows/Windows/Windows Server/Roles/Active Directory Certificate Services/Deployment.md +++ b/Workflows/Windows/Windows Server/Roles/Active Directory Certificate Services/Deployment.md @@ -15,7 +15,7 @@ This document outlines the Microsoft-recommended best practices for deploying a - Ensure the timezone is correctly configured - Ensure the hostname is correctly configured -### Offline Root CA `LAB-CA-01` Role Deployment +### Offline (Non-Domain-Joined) Root CA `LAB-CA-01` Role Deployment - Provision a **non-domain-joined** Windows Server - This is critical that this device is not domain-joined for security purposes - Navigate to "**Server Manager > Manage > Add Roles and Features**" @@ -32,7 +32,7 @@ This document outlines the Microsoft-recommended best practices for deploying a - Click "**Next**" > "**Next**" > "**Next**" > "**Install**" - Restart the Server -### Offline Root CA `LAB-CA-01` Role Configuration +### Offline (Non-Domain-Joined) Root CA `LAB-CA-01` Role Configuration - Navigate to "**Server Manager > (Alert Flag) > Post-deployment Configuration: Active Directory Certificate Services**" - You will be prompted for an admin user, in this example, you will use the pre-populated `LAB-CA-01\Administrator` - Check the boxes for `Certification Authority` and `Certification Authority Web Enrollment` then click "**Next**" @@ -67,6 +67,14 @@ You will see a finalization screen confirming everything we have configured, it !!! success "Active Directory Certificate Services" If everything went well, you will see that the "**Certificate Authority**" and "**Certification Authority Web Enrollment**" both have a status of "**Configuration succeeded**". At this point, you can click the "**Close**" button to conclude the Root CA configuration. +### Online (Domain-Joined) Subordinate/Intermediary CA `LAB-CA-02` Role Deployment +!!! warning "Under Construction" + Section is still being written during lab deployment. + +### Online (Domain-Joined) Subordinate/Intermediary CA `LAB-CA-02` Configuration Deployment +!!! warning "Under Construction" + Section is still being written during lab deployment. + !!! warning "Raw Unprocessed Documentation - Do Not Use" - `Certificate Enrollment Policy Web Service` - `Certificate Enrollment Web Service`