Active Directory Certificate Services

Installing and using Active Directory Certificate Services to create trusted Certificates in an AD Domain.

[a-hit]

Finally !!! Someone doing it right ! In every single video I've seen so far CA was being installed on the DC 😵😵

[ball_soup]

Thanks for this. Previous IT guy installed ADCS on a DC that was due for a replacement, and I ended up completely breaking the DC while removing the AD roles. I’ve been trying to figure out how to do this for a few days now and you’ve really helped out.

[ShivamSharma-vvlw]

Amazing video you have created, very detailed and simple explanation. thank you sir.

[sglant]

Thank you so much. I was over-thinking my setup. I was using the wrong choice in the CSR request. Duh for me. Thanks for

[thecalopor]

I am very grateful sir, you just saved my job. God, or whoever you believe in, bless you !

[ovais]

Awesome content, very clear and precise. You indeed explained it like a professor but nailed it like a rockstar! :)

[fredrikstustad]

thanks, that explaned my problem to get my sertificate to work. (install domain before sertificate) now it work.

[bernicastaneda]

!!Excelente Contenido muy bien explicado saludos de Guate

[abinashkumarsinha]

Its nice and wonderful explanation how certificate works

[ryanhindley]

Very helpful! A bit ironic that you are showing how to do Windows infrastructure from a Mac! LOL

[tingtingren]

thanks, it is a very clear explaination

[DigsWigs]

I cant believe this is free. Thank you.

[boucharayoussef]

Hey Professor, keep up the good work!

[fabiantoro]

This is exactly how a live demonstration in classroom should look like. I watched your video a couple of years ago and helped me for academic purposes. Now that I have to actually work with certificates I have a better picture. Thank you so much, you excel at explaining concepts. Just a couple of questions, if you have the time to reply: what happens if after installing the certificates signed by the internal CA I decide to use a different web browser such as Firefox or Chrome? Do I have to manually install the certificate on the workstation even if I have 100 computers?

[TheRushabhyk]

Hi Andrew Sir,
I hope you're doing well. I wanted to check if the video mentioned above can guide me in installing it on my existing infrastructure. My main server isn't responding well, so I plan to set up another primary server and transfer the FSMO role to the secondary one. After that, I'm looking to install the AD DC certificate. Could you confirm if this is the right approach?

[LinusTimon]

*you need to be a Domain Admin, tried it as a normal domain member and the Enterprise CA option was greyed out.

[davidtuti]

Thanks for your tutorial. How could I get p12 of the p7b certificates downloaded?

[jrmcnair]

Thanks very much for the clear and informative video! I wanted to add that after setting all this up, the certificate I issued in my home lab for my Nginx Linux reverse proxy was failing until I added subjectAltName to the certificate request. Hopefully, this can save someone experiencing the same issue from the hours of aggravation I had!

I did have a follow-up question. I added the CA roles to a headless VM (Windows Server 2019 Standard) and I don't get the Certificate Authority tooling as a result. I tried adding the feature to my Hyper-V host server, but it throws an error on start, and it isn't an option for the CA server. Is there a way to get the tooling working?

Thanks again!

[NevaranUniverse]

All of the web services or stuff like IPMI need a private key alongside the certificate- How do you get that one? Could not find any information about it

[tedmolavi]

Thanks for your informative video. Question: Are there any security concerns about installing ADCS on a DC? The DC doesn't give you any warnings when you try to do so. I have read different views on this online. Please advise. Thanks