Sharing the Point

Office 365, SharePoint, Project Server – Support Blog

Posts Tagged ‘Certificate authority’

How to Install Certificate Enrollment Web Service

Posted by Ashraf on December 8, 2010

After my previous post on How to Install Certificate Services on Windows Server 2008 R2.

You’ve now got a Certificate Authority- Root CA, that is capable of issuing certificates to your servers and users.  You can go back through the wizard and install additional CA components, for example, that will allow you to issue certificates to users and computers that are/are not part of your domain.  That option is called ‘Certificate Enrollment Web Service’. Go through the following steps:

1.       Select Add Role Services from the Active Directory Certificate Services Role. Wizard will guide you through.

2.       From the Select Role Services choose Certificate Enrollment Web Service, Certificate Enrollment Policy Web Service and click Next.

Select Role Services

Select Role Services

3.       For Specify CA for certificate Enrollment Web Services; leave the default CA settings (i.e. CA name), Next

Specify CA for certificate Enrollment Web Services

Specify CA for certificate Enrollment Web Services

4.       Select Windows Integrated Authentication Type, Click Next

Windows Integrated Authentication

Windows Integrated Authentication

5.       Before doing this step, please add your administrator account to the IIS_USER group

6.       Specify service account credentials for certificate enrollment web service; add your administrator account and password. Click Ok then, Next

service account credentials

service account credentials

7.       Installation result page will show you the result and close the page after you are informed.

installation result page

installation result page

These are all for installing a Root Certificate Authority (CA) and Enrollment web service for Microsoft Active Directory Certificate Service.

Hope it helps!!

Posted in Digital Certificate - SSL, System Administration, Windows Server | Tagged: , , , , | Comments Off on How to Install Certificate Enrollment Web Service

How to Install Certificate Services on Windows Server 2008 R2

Posted by Ashraf on December 6, 2010

This post is moved to,

http://mroffice365.com/2010/12/how-to-install-certificate-services-on-windows-server-2008-r2/

Posted in Digital Certificate - SSL, System Administration, Windows Server | Tagged: , , , , , , | 1 Comment »

How to Redirect all http requests to https on Tomcat by default

Posted by Ashraf on November 23, 2010

***Considering that you already enable SSL with proper certificate.

To auto redirect all of your webserver requests from http to https just paste the following to your tomcat installation folder\conf\web.xml file and restart the service.

<security-constraint>
<web-resource-collection>
<web-resource-name>Protected Context</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<!– auth-constraint goes here if you requre authentication –>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>

Now browse http://localhost and it will automatically go to https://localhost , for example.

Posted in System Administration, Windows Server | Tagged: , , , , , | Comments Off on How to Redirect all http requests to https on Tomcat by default

How to Export SSL certificate as PFX format from Internet Explorer

Posted by Ashraf on November 1, 2010

This post is moved to,

http://mroffice365.com/2010/11/how-to-export-ssl-certificate-as-pfx-format-from-internet-explorer/

 

Posted in System Administration, Windows Server | Tagged: , , , | 1 Comment »

How to Create a IIS 7 Web Server Certificate Signing Request (CSR)

Posted by Ashraf on October 25, 2010

Consider: Windows Server, IIS 7.5

To create a certificate signing request from iis please follow these instructions:

  • Enter the information according to your need. And Click, Next
web server certificate Request

web server certificate Request

Note: Common name must be the same name of the domain or host you are going to implement certificate

  • Select Cryptography service provider and bit length, leave this value as default. Click, Next
Cryptography service provider and bit length

Cryptography service provider and bit length

  • Save your request to a text file and send it to the certificate authority (CA) for issuing you a certificate.
Save your request as txt file

Save your request as txt file

  • Click Finish.

Posted in System Administration, Windows Server | Tagged: , , , , , | Comments Off on How to Create a IIS 7 Web Server Certificate Signing Request (CSR)

 
%d bloggers like this: