|
To
install a CA Enterprise Root, you need to have the following things:
- Windows 2000 Server
- Windows 2000 DNS
- Active Directory Services
- Administrative Rights
- Can be installed on a domain controller or domain member computer
To Install a Windows 2000 Stand Alone CA you will need:
- Windows 2000 Server
- Local Administrative Rights
To begin setup of the CA, you first need to logon to the server with
administrative rights.
To start the install, follow the following instructions.
Use the Add/Remove Programs control panel.
Click Add/Remove Windows Components
Check Certificate Services.
Also check IIS if you wish to use the web based components (if it
isn't already checked).
Click to see what the setup looks like.
Specify the Type of CA:
If Active
Directory is not installed, you can only install a stand alone
Certificate Authority.
If an Active
Directory is detected, the Enterprise root CA option is selected
if there are no CAs already registered in the Active Directory.
If there are CAs registered in the Active
Directory, the Enterprise subordinate CA option is selected.
Setup Options
Choose Length Keys to generate for the root certificate:
384 bit to 16384 bit
You can use Existing Keys if this is a reinstall or recovery.
Set the CA name (common name)
Valid for time (how long till the root certificate expires)
Install Location options, including shared folders.
Finishing Setup
If IIS is installed, it is required to restart, to install Certificate
Services on the web server. Options to install a Commercial certificate.
That’s it.
Uninstall
If you wish to uninstall a CA, just go to Add/Remove Programs
then Add Windows Components and uncheck the box for Certificate
Services
Back to Organization
Forward to Administration
|
|