CA (Certificate Authority) Server Configuration Diagram Process

Test Topology:
Test Content and Topology Description: Test Content: Independent Root CA Server and Independent Subordinate CA Server Construction and Client Certificate Application Test Topology Description: Server1 is independent in the figure The root CA server, server2 acts as an independent subordinate CA server, and the other three clients are client1, client2, and client3. Experiment configuration process: Step 1: Build a standalone root CA server, I need to install IIS first (Certificate Service installation process) Will write the virtual directory in the default website of IIS, if there is no IIS, can not apply for a certificate through the web browser), and then install the certificate service, the configuration process is as follows:
After the installation is completed, as shown: >The installation process of the certificate service:













< Br>




After the installation is complete, the client can apply for a certificate. Since it is a stand-alone root CA, and we are not a domain environment, we can only apply for a certificate through a web browser. : http://CA server's ip address or Computer name /certsrv, as shown in the figure:











Managed by CA server The certificate is manually issued, the certificate server server1 is opened, and the management tool---certificate authority is issued. The certificate is issued:
















You can view it through the "Content" of the Internet option or the MMC Certificate Management Unit.