In this demonstration,
we're going to install the Online Responder role for our certificate authority.
We add the location for the OSCP to the cert which is on our web server,
and then we make the certificate available for autoenroll for our users.
This is CA2.
We are in Server Manager.
We're going to Add roles and features, click Next.
Let me bring this down.
Click Next,
and this is our server, it's going to just be in the local one.
And we're going to come up here and expand this, and check
this, which is the Online Responder.
We'll go ahead and Add Features and then click on Next. Next again, and
then Install. This will install it in its entirety.
And since we already have the groundwork for our certificate authority,
we're ready to set up everything else and we don't
have to come in and configure it.
I'm going to minimize this, come over here to our cr console, fire it up.
We'll go to our Certification Authority, right‑click on it,
go down to Properties, and we come over to Extensions.
We need to add this extension inside of here so all the
different people who have the certificate or devices know
where this Online Responder is located.
So, we want the AIA in here, and we simply come down here
and say Add, and it's basically this one,
http,
the ServerDNSName, and the ServerDNSName is
ca2.carvedrock.com, and with the /ocsp.
We're going to click on OK, and then click on Apply.
Go ahead and restart the service, just takes a second. Now what we're
going to do after this is we're going to make that certificate
available, and we can auto enroll that certificate just as we auto
enrolled some other things inside of here.
We also want to check this, Include in the online
certificate status protocol (OCSP) extension. Click on
Apply there, and that was my mistake.
We have to restart that server twice, but it's best we get this right. Now
I'll click on OK, and we have our Certificate Templates right here, and
it's right down here, OCSP Response Signing.
We could make a duplicate of this, however,
we're going to take the original one.
I'm going to double‑click it, we'll come up here to Security, and we have to
make sure that authenticated users have the Enroll and the Autoenroll feature
for this particular certificate because we're going to auto enroll them with
this certificate. We'll come down, click on Apply, and then click on OK.
And you probably guess what we do next.
We come here, expand carvedrockIssueCA, go to Certificate Templates,
right‑click, say New, Certificate Template to Issue.
We're going to come over, we're going to scroll down, and here it is
right here. Click on OK, and now, since we have included auto
enrollment in our Group Policy Object and we have authenticated users,
auto enroll right to that certificate, we're all set to go. So that is
how you install an Online Responder with Windows Server 2022
certificate services.
And this concludes the course.
I hope you enjoyed this course and learned how to get around Certificate Services in Windows Server 2022.