Practical Exercises

For these three practical exercises, you need a 2012/2016 server that is a domain controller.

If you are a home user and have access to a desktop with Windows 7, Windows 8.1, or Windows 10, and do not have a server, you can still complete the second exercise.

Practical Exercise 1 – Building a Certificate Server

To build a certificate server, follow these steps:

1. Log in to your 2012/2016 domain controller and open Server Manager.
2. Select Manage, followed by Add Roles and Features. Then, click Next three times.
3. On the Select Server Roles page, check the top box, Active directory certificate server. Select the Add Features button. Click Next three times. Check the CA box, then click Next, and then Install. This will take a few minutes. When finished, press Close.
4. On the Server Manager toolbar, double-click on the yellow triangle. This is a notification. In the post-deployment configuration wizard, double-click on the blue...