And this lab will be deploying and configure an air to tire C hierarchy here in this scenario for this
lab a datum has expanded therefore its security requirements also have increased the security department
is particularly interested in enabling secure access to critical websites and to provide an additional
security for some features to address these and other security requirements aided and has decided to
implement PTI by using the ADC as role in Windows Server 2016.
Other senior network administrator at a datum you're responsible for implementing and the ADC s deployment.
So after completing this slip you'll be able to deploy and or flying route C and deploy an enterprise
subordinate C no exercises.
There are two exercises in this lab so exercise one is deploying an off line route C let's start with
this exercise.
The scenario for this exercise is that aid Ayton wants to use certificates for various purposes.
Unit to stole the appropriate C infrastructure because a datum uses Windows Server 2016 aided yes.
You decided to implement the ADC s role whenever you reviewed the available designs you decided to implement
a standard route C this will be taken off line after it issues a certificate for a subordinate C after
installation you must make that make sure that you configure the C DP and FIA locations correctly you
must also make sure that you have a domain name system record for the off line rude C so that it is
accessible from the network.
The main tasks for this exercise are as follows.
First you have to create file and printer share and exceptions.
Second you have to install and configure Active Directory cert services on C S we are 1 and so 2 you
have to create a domain name system or DNS record for a no fly zone route.
C So let's start off this task.
1 which is to create a file and print or share exceptions.
Just sign into the server as administrator and then on the server in the network and Sharon Center told
non violent printer of Sharon on guest and public networks and finally on aloneness as we are one.
In the network and Sharon center turn on file and print or sharing on the demand network.
Task 2 in which you have to install and configure Active Directory cert services on CDL shows.
We are one so you have to switch to a C S we are one and then started server manager use the at roles
and features to install the Active Directory cert services role after installation completes click the
configure Active Directory cert services on the destination server.
Text then configure the ADC as role as a stand alone route see it with the name a datum route C then
set the key lands to 49 to 6 and then accept all other default values.
Then on C as we are one open certification authority council and open the properties dialog box for
8 a.m. routes C configure the new locations for the city appear to be registered to B column slash slash
long as we are one dot a datum dot com slash saw data and specify C names CRL name Sapphic sound Delta
CRL allowed and to finally select the following options include in the city B extension of issued certificates
and include in serials clients used to find this Delta Sierra location then configure new locations
for a IEEE to be on a state to be call on slash slash launder says we are dot a datum dot com and their
full address again and select the including the extension of 4 issued certificates check books then
publish the CRL on see this as we are 1 and export the route C certificate and then copy the DOT Sarah
file to backslash backslash long does as we are a 1 backslash C $ character copy the contents two fold
of folder of Windows system so to to serve as a server we sort and Rule 2 long dash as we are 1 server
on disks see on C drive and finally task 3 where you have to create a domain name system a record for
an offline route see so on lambda C1 ints or manager open DNS manager console and create a cost resource
record for C.
There she is.
We are 1 in the 8 8 on dot com for work low carb zone use IP address.
In my case it's 172 one daughter sixteen dot zero dot forty four there C as we are one host a resource
record after completing this exercise you should have successfully installed and configure the stand
along Route certification authority or C a role on the C dash as we are a 1 server additionally you
should have created an appropriate Dennis record an active directory domain services and so that other
service can connect to see a dash as we are 1 and when you are done with this exercise switch to exercise
2 which is deploy in an enterprise subordinate say here with this scenario for this exercise after deploying
the standalone route see the next step is to deploy an enterprise subordinate see a datum and wants
to use the enterprise subordinate say to utilize a tedious integration Additionally because the route
C is a stand alone C you want to publish its certificate to all clients the main tasks for this exercise
are as follows.
First you have to install and configure ADC s on long as we are 1.
Then install a subordinate C certificate.
Third publish a route C certificates through group policy.
And here is the task one for this exercise where you have to install and configure ADC s on long as
we are 1.
So first on long as we are 1 in server manager install the Active Directory cert services role include
the certification authority and certification authority web enrollment role servers.
Second after and stolen is successful installation is successful click the configure active directory
cert services on the destination server text then select the certification authority and certification
authority weapon Roman troll services and configure LAWN dishes.
We are one to be an enterprise C then configure this C type to be a subordinate C and for the C name
type a datum this issue and C say save the request file to the local drive task to where you have to
install a subordinate C certificate.
So long as we are one install the C drive colon backslash Beirut C DOD c e r cert to the drastic route
certification authorities tor then go to the local disk C and then copy the a datum rootsy dot CRL and
see this as we are 1 underscore a D to maroon C dot see our t files to see ion it pop dub dub dub Beirut
backslash serve data copy the along as we are one dot edit dot com underscore a datum load it launches
we are 1 thus C dot req request file to C as we are 1 share which is backslash backslash C dish as we
are 1 backslash C $ assign backslash this will Coreper this file to this chair then switch to C as we
are 1 and from certification authority console on C as we are 1 submit a new certificate to request
by using the DOT req file let your corporate in step 3 then issue the certificate and then exported
to dot p. 7 be format with a complete change save their file to long as we are 1 backslash C drive with
Kerrick $ character backslash sub C that B 7 be switched to long as we are 1 and install the subordinate
C certificate on aloneness we are 1 by using the certification authority council staff the service and
ensure that the ADC a service successfully starts then switch to C as we are 1 and then shop down the
server the task task 3 is to publish a route C certificate from group policy so on Long D C1 in server
manager open the group policy management console and added the default domain policy publish their route
C that Sarah file to backslash backslash long dashes we are one backslash C $ character 2 is a trusted
route certification authority store which is located in computer configuration policies windows settings
security settings public key policies folder after completing this exercise you should have successfully
deployed and configure an enterprise subordinate C you also should have a subordinate C certificate
issued by a route C and installed on longs as we are one to establish trust between the routes in and
the main member class you will use group policy to deploy route C certificate.
Now if you failed to complete some of those tasks or exercises you can always refer to the second to
to the next file to the next video in which I'll show the steps how to complete each of these tasks
and complete two of these exercises.
So I'll see you there.