The following steps can be used to install
Microsoft Internet Information Services (IIS) and the certificate authority on a domain
member. Note that a CA should not be set up on the ISA server itself, and IIS should never
be set up on ISA (with the possible exception of the SMTP component of IIS in certain
circumstances). IIS is required to support the certificate enrollment website and must be
installed on the same system as the CA to provide for web certificate enrollment.
1. Open Add or Remove Programs from the Control Panel.
2. Select the Add/Remove Windows Components button.
3. Click the check box beside Application Server. The check box is enabled, with a gray
background, as shown in Figure 9.21. This installs minimal IIS components, perfect
for the CA website. Click Next.
4. Press Finish after IIS has been installed to return to the Add or Remove Programs
window.
5. Select the Add/Remove Windows Components button.
6. Click the Certificate Services check box.
7. Read the warning dialog box, and then click the Yes button. Click Next.
8. On the CA Type page, select the appropriate option for the environment (enterprise
root CA, in most cases).
Pages:
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443