AD CS (PKI) – Web resources

Here are list of web resources (URL) about AD CS 2008/r2:

2013: Test Lab Guide: Deploying an AD CS Two-Tier PKI Hierarchy : http://technet.microsoft.com/en-us/library/hh831348.aspx

AD CS 2008 R2 Installation Getting Started Guide: http://technet.microsoft.com/en-us/library/cc753802(WS.10).aspx

Downloadable, printable job aids which include the most commonly used commands and procedures for administering Server Core installations are available at http://go.microsoft.com/fwlink/?LinkId=151984.

Steps for installing a server role on a Server Core installation of Windows Server 2008 R2:

Unlike Windows Server 2008, Server Core installations of Windows Server 2008 R2 use Dism.exe to install and uninstall most server roles. For more information about Dism.exe, see http://technet.microsoft.com/en-us/library/dd772580(WS.10).aspx.

Installing Windows Features on a server running a Server Core installation of Windows Server 2008 R2: http://technet.microsoft.com/en-us/library/ee441253(WS.10).aspx

Installing AD CS on a Server Core installation of Windows Server 2008 R2: By using PowerShell script: Setup Certification Authority with PowerShell

How to request and install a certificate on a server core: http://social.technet.microsoft.com/Forums/en-US/winservercore/thread/97d388e8-eb88-4744-b47a-938065849deb/

AD CS and PKI Step-by-Steps, Labs, Walkthroughs, HowTo, and Examples:

http://www.microsoft.com/download/en/details.aspx?id=22838

AD CS 2008 step by step: http://technet.microsoft.com/en-us/library/cc772393(WS.10).aspx

http://social.technet.microsoft.com/wiki/contents/articles/4797.aspx

AD PKI 2003 step by step: http://technet.microsoft.com/en-us/library/cc772670(WS.10).aspx

How to configure Certificate based authentication for OWA: http://msexchangeteam.com/archive/2008/10/07/449942.aspx

=> Example Step by Step: http://www.corelan.be/index.php/2008/07/14/windows-2008-pki-certificate-authority-ad-cs-basics/

Checklist: Configuring certificate Auto-Enrollment:

=> http://technet.microsoft.com/en-us/library/cc773385(WS.10).aspx

Checklist: Decommissioning a certification authority

=> http://technet.microsoft.com/en-us/library/cc786938(WS.10).aspx

Troubleshooting: http://technet.microsoft.com/en-us/library/cc758774(WS.10).aspx

ADCS Certificate Templates, how to, best practices and troubleshooting:

http://www.microsoft.com/download/en/details.aspx?id=7429

http://technet.microsoft.com/en-us/library/cc758496(WS.10).aspx

Certificate Services How To… http://technet.microsoft.com/en-us/library/cc737760(WS.10).aspx

French technet articles: http://technet.microsoft.com/fr-fr/library/cc770357(WS.10).aspx

Checklist: Creating a certification hierarchy with an offline root certification authority:

=> http://technet.microsoft.com/en-us/library/cc737834(WS.10).aspx (superseded by: http://social.technet.microsoft.com/wiki/contents/articles/2900.aspx )

ADCS and firewall ports: http://blogs.technet.com/b/pki/archive/2010/06/25/firewall-roles-for-active-directory-certificate-services.aspx

ADCS FAQ: http://social.technet.microsoft.com/wiki/contents/articles/1587.active-directory-certificate-services-ad-cs-public-key-infrastructure-pki-frequently-asked-questions-faq.aspx

ADCS: Clean CA db

http://blogs.technet.com/b/askds/archive/2010/08/31/the-case-of-the-enormous-ca-database.aspx

ADCS: New Hotfix to fix the CA private key missing from system states backups:

http://support.microsoft.com/kb/2603469

AD CS – Permissions and delegation model:

http://technet.microsoft.com/en-us/library/cc732590.aspx

https://social.technet.microsoft.com/wiki/contents/articles/10942.ad-cs-security-guidance.aspx

AD CS tool to install: PKI smtp exit module

http://social.technet.microsoft.com/wiki/contents/articles/active-directory-certificate-services-smtp-exit-module-for-windows-server-2008-r2-example.aspx

ADCS NDES/SCEP:  http://www.microsoft.com/download/en/details.aspx?id=1607

http://www.windowsitpro.com/article/security/setting-up-network-device-enrollment-service-

ADCS CEP/CES: http://www.microsoft.com/download/en/details.aspx?id=1746

http://blogs.technet.com/b/askds/archive/2010/05/25/enabling-cep-and-ces-for-enrolling-non-domain-joined-computers-for-certificates.aspx

http://channel9.msdn.com/Events/TechEd/NorthAmerica/2011/SIM329

AD CS Online Responder Services (OCSP) in a Network: http://www.microsoft.com/download/en/details.aspx?id=17877

http://technet.microsoft.com/en-us/library/cc753468(WS.10).aspx

http://blogs.technet.com/b/askds/archive/2009/06/24/implementing-an-ocsp-responder-part-i-introducing-ocsp.aspx

ADCS deploying cross-forest certificate enrollment:

http://www.microsoft.com/download/en/details.aspx?id=17877

http://technet.microsoft.com/en-us/library/ff955845(WS.10).aspx

ADCS operations tasks: http://technet.microsoft.com/en-us/library/cc771702(WS.10).aspx

ADCS and Powershell: http://blog.powershell.no/2011/01/09/working-with-active-directory-certificate-services-from-windows-powershell/

Codeplex: PKI Powershell module: http://pspki.codeplex.com/