{"id":811,"date":"2021-10-11T16:23:08","date_gmt":"2021-10-11T23:23:08","guid":{"rendered":"https:\/\/www.xh86.me\/?p=811"},"modified":"2021-10-11T16:23:08","modified_gmt":"2021-10-11T23:23:08","slug":"windows-server-2016-%e5%ae%89%e8%a3%85-ad-%e5%b9%b6%e5%bc%80%e5%90%af-ssl","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=811","title":{"rendered":"Windows Server 2016 \u5b89\u88c5 AD \u5e76\u5f00\u542f SSL"},"content":{"rendered":"

<\/a> Windows Server 2016 \u5b89\u88c5 AD \u5e76\u5f00\u542f SSL<\/p>\n

AD <\/a>\u662f Active Directory \u7684\u7b80\u5199\uff0c\u4e2d\u6587\u79f0\u6d3b\u52a8\u76ee\u5f55\u3002\u6d3b\u52a8\u76ee\u5f55(Active Directory)\u4e3b\u8981\u63d0\u4f9b\u4ee5\u4e0b\u529f\u80fd\uff1a<\/p>\n

1\u3001\u670d\u52a1\u5668\u53ca\u5ba2\u6237\u7aef\u8ba1\u7b97\u673a\u7ba1\u7406<\/p>\n

2\u3001\u7528\u6237\u670d\u52a1<\/p>\n

3\u3001\u8d44\u6e90\u7ba1\u7406<\/p>\n

4\u3001\u684c\u9762\u914d\u7f6e<\/p>\n

5\u3001\u5e94\u7528\u7cfb\u7edf\u652f\u6491\u7b49\uff1b<\/p>\n

\u68ee\u6797\u6a21\u578b<\/p>\n

<\/div><\/p>\n

AD \u57df\u89d2\u8272\u5b89\u88c5<\/p>\n

\u5728\u9700\u8981\u5b89\u88c5 AD \u57df\u63a7\u5236\u5668\u7684\u7535\u8111\u4e0a\u6253\u5f00\u670d\u52a1\u5668\u7ba1\u7406\u5668\uff0c\u70b9\u51fb\u6dfb\u52a0\u89d2\u8272\u548c\u529f\u80fd<\/p>\n

<\/div><\/p>\n

<\/div> \u6253\u5f00\u6dfb\u52a0\u89d2\u8272\u548c\u529f\u80fd\u5411\u5bfc\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u5b89\u88c5\u7c7b\u578b\u9009\u62e9\u57fa\u4e8e\u89d2\u8272\u6216\u57fa\u4e8e\u529f\u80fd\u7684\u5b89\u88c5\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

\u670d\u52a1\u5668\u9009\u62e9\u4ece\u670d\u52a1\u5668\u6c60\u4e2d\u9009\u62e9\u670d\u52a1\u5668\uff0c\u518d\u9009\u4e2d\u6c60\u4e2d\u7684\u672c\u5730\u670d\u52a1\u5668\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

<\/div> \u670d\u52a1\u5668\u89d2\u8272\u9009\u62e9 Active Directory \u57df\u670d\u52a1\uff0c\u4f1a\u5f39\u51fa\u6dfb\u52a0 Active Directory \u57df\u670d\u52a1\u6240\u9700\u7684\u529f\u80fd\uff1f\uff0c\u70b9\u51fb\u6dfb\u52a0\u529f\u80fd<\/p>\n

\u70b9\u51fb\u4e0b\u4e00\u6b65\uff0c \u8fd9\u91cc\u4e0d\u9700\u8981\u9009\u62e9<\/p>\n

<\/div><\/p>\n

<\/div> \u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u786e\u8ba4\u8fd9\u91cc\u52fe\u9009\u5982\u679c\u9700\u8981\uff0c\u81ea\u52a8\u91cd\u65b0\u542f\u52a8\u76ee\u6807\u670d\u52a1\u5668\uff0c\u70b9\u51fb\u5b89\u88c5<\/p>\n

<\/div><\/p>\n

<\/div> Active Directory \u57df\u670d\u52a1\u89d2\u8272\u5b89\u88c5\u5b8c\u6210\uff0c\u70b9\u5173\u95ed<\/p>\n

\u8fd0\u884c\u90e8\u7f72\u5411\u5bfc<\/p>\n

\u8fd0\u884c AD DS\uff08Active Directory \u57df\u670d\u52a1\u7684\u7b80\u79f0\uff09\u90e8\u7f72\u5411\u5bfc\uff0c\u6253\u5f00\u672c\u5730\u670d\u52a1\u5668\u7684\u670d\u52a1\u5668\u7ba1\u7406\u5668\uff0c\u70b9\u51fb\u901a\u77e5-\u5c06\u6b64\u670d\u52a1\u5668\u63d0\u5347\u4e3a\u57df\u63a7\u5236\u5668<\/p>\n

<\/div><\/p>\n

<\/div> \u6253\u5f00 AD DS \u7684\u90e8\u7f72\u5411\u5bfc\uff0c\u7531\u4e8e\u6211\u4eec\u8fd9\u91cc\u662f\u90e8\u7f72\u65b0\u7684 AD \u63a7\u5236\u5668\uff0c\u6240\u4ee5\u90e8\u7f72\u914d\u7f6e\u9009\u62e9\u6dfb\u52a0\u65b0\u6797\uff0c\u628a\u6839\u57df\u540d\u8bbe\u7f6e\u6210 lework.com\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u89e3\u91ca\uff1a<\/p>\n

\u5c06\u57df\u63a7\u5236\u5668\u6dfb\u52a0\u5230\u73b0\u6709\u57df\uff1a\u5728\u73b0\u6709\u7684\u57df\u63a7\u5236\u5668\u4e2d\u6dfb\u52a0\u65b0\u7684\u57df\u63a7\u5236\u5668 \u5c06\u65b0\u57df\u6dfb\u52a0\u5230\u73b0\u6709\u6797\uff1a\u5728\u73b0\u6709\u7684\u6797\u4e2d\u65b0\u5efa\u57df\uff0c\u4e0e\u6797\u4e2d\u73b0\u6709\u7684\u57df\u4e0d\u540c \u6dfb\u52a0\u65b0\u6797\uff1a\u5728\u6ca1\u6709\u6797\u7684\u60c5\u51b5\u4e0b\u65b0\u5efa\u6797<\/p>\n

\u8bbe\u7f6e\u57df\u5bc6\u7801\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

\u57df\u63a7\u5236\u5668\u9009\u9879\uff1a<\/p>\n

\u6797\u529f\u80fd\u7ea7\u522b\uff08 \u5305\u542b Windows Server 2008 \u5230 Windows Server 2016 \u7ea7\u522b\u90fd\u6709\uff09\uff1a<\/p>\n

Windows Server 2016<\/p>\n

\u57df\u529f\u80fd\u7ea7\u522b\uff08\u53ea\u5305\u542b Windows Server 2016 \u57df\u529f\u80fd\uff09\uff1aWindows Server 2016 \u6307\u5b9a\u57df\u63a7\u5236\u5668\u529f\u80fd\uff1a\u9ed8\u8ba4<\/p>\n

<\/div> \u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

<\/div> \u8bbe\u7f6e AD DS \u7684\u6570\u636e\u5e93\u3001\u65e5\u5fd7\u6587\u4ef6\u548c SYSVOL \u7684\u4f4d\u7f6e\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

<\/div> \u5148\u51b3\u6761\u4ef6\u68c0\u67e5\u901a\u8fc7\uff0c\u70b9\u51fb\u5b89\u88c5\uff0c\u5982\u679c\u4e0d\u901a\u8fc7\u8bf7\u6839\u636e\u63d0\u793a\u67e5\u770b\u539f\u56e0<\/p>\n

\u6b63\u5728\u8fdb\u884c\u81ea\u52a8\u90e8\u7f72\uff0c\u90e8\u7f72\u5b8c\u6210\u540e\u4f1a\u81ea\u52a8\u91cd\u542f\u670d\u52a1\u5668<\/p>\n

AD \u57df\u63a7\u5236\u5668\u90e8\u7f72\u5b8c\u6210\uff0c\u6253\u5f00\u670d\u52a1\u5668\u7ba1\u7406\u5668-\u5de5\u5177-Active Directory \u7528\u6237\u548c\u8ba1\u7b97\u673a<\/p>\n

<\/div><\/p>\n

\u5c31\u53ef\u4ee5\u770b\u5230\u6211\u4eec\u521a\u624d\u90e8\u7f72\u597d\u7684\u57df\uff0c\u8fd9\u6837\u4e00\u4e2a\u5b8c\u6574\u7684\u57df\u5c31\u90e8\u7f72\u5b8c\u6210\u4e86 \u542f\u7528 LDAPS<\/p>\n

\u521b\u5efa\u8bc1\u4e66\u9881\u53d1\u673a\u6784<\/p>\n

\u6dfb\u52a0 Active Directory \u8bc1\u4e66\u670d\u52a1 \u89d2\u8272<\/p>\n

<\/div><\/p>\n

\u9009\u62e9\u8bc1\u4e66\u9881\u53d1\u673a\u6784<\/p>\n

<\/div><\/p>\n

<\/div> \u70b9\u51fb\u4e0b\u4e00\u6b65\u8fdb\u884c\u5b89\u88c5<\/p>\n

\u914d\u7f6e\u57df\u8bc1\u4e66<\/p>\n

\u70b9\u51fb\u901a\u77e5-\u914d\u7f6e\u76ee\u6807\u670d\u52a1\u5668\u4e0a\u7684 Active Directory \u8bc1\u4e66\u670d\u52a1<\/p>\n

<\/div><\/p>\n

<\/div> \u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u52fe\u9009\u8bc1\u4e66\u9881\u53d1\u673a\u6784,\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

<\/div> \u9009\u62e9\u4f01\u4e1a CA,\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u9009\u62e9\u6839 CA,\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

<\/div> \u9009\u62e9\u521b\u5efa\u65b0\u7684\u79c1\u94a5,\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u6307\u5b9a CA \u7684\u52a0\u5bc6\uff0c\u9ed8\u8ba4\u5373\u53ef.\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

\u6307\u5b9a CA \u540d\u79f0,\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

<\/div> \u6307\u5b9a\u6709\u6548\u671f\uff0c\u8fd9\u91cc\u8bbe\u7f6e\u4e3a 10 \u5e74,\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

\u6307\u5b9a CA \u6570\u636e\u5e93\u7684\u4f4d\u7f6e\uff0c\u9ed8\u8ba4\u5373\u53ef.\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

\u786e\u8ba4\u8bc1\u4e66\u7684\u914d\u7f6e\uff0c\u70b9\u51fb\u914d\u7f6e.\u70b9\u51fb\u4e0b\u4e00\u6b65<\/p>\n

<\/div><\/p>\n

<\/div> \u914d\u7f6e\u5b8c\u6210\u540e\uff0c\u70b9\u51fb\u5173\u95ed\u9875\u9762<\/p>\n

\u914d\u7f6e\u5b8c\u6210\u540e\uff0c\u91cd\u542f\u4e0b\u670d\u52a1\u5668<\/p>\n

<\/div> \u5728\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u4e2d\u53ef\u4ee5\u770b\u5230\u7ed9\u57df\u63a7\u9881\u53d1\u7684\u8bc1\u4e66<\/p>\n

\u8fde\u63a5 AD<\/p>\n

\u8fd0\u884c\u2013>ldp.exe<\/p>\n

LDAP:\\\\\\WIN-V5SBNPSNFOM.lework.com:389<\/p>\n

<\/div><\/p>\n

LDAPS:\\\\WIN-V5SBNPSNFOM.lework.com:636<\/p>\n

<\/div><\/p>\n

\u5728 Active Directory \u670d\u52a1\u5668\u4e0a\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u6765\u5bfc\u51fa\u8bc1\u4e66,\u4f9b\u5ba2\u6237\u7aef\u8fde\u63a5\u4f7f\u7528<\/p>\n

C:\\Users\\Administrator>certutil -ca.cert client.crt CA \u8bc1\u4e66[0]: 3 — \u6709\u6548<\/p>\n

CA \u8bc1\u4e66[0]:—–BEGIN CERTIFICATE—–<\/p>\n

MIIDfTCCAmWgAwIBAgIQKb58EV2zDLBAbvMySV\/voDANBgkqhkiG 9w0BAQsFADBR<\/p>\n

MRMwEQYKCZImiZPyLGQBGRYDY29tMRYwFAYKCZImiZPyLGQBG RYGbGV3b3JrMSIw<\/p>\n

IAYDVQQDExlsZXdvcmstV0lOLVY1U0JOUFNORk9NLUNBMB4XDTE<\/p>\n

5MDcyNDEwMjEw<\/p>\n

NloXDTI5MDcyNDEwMzEwNlowUTETMBEGCgmSJomT8ixkARkWA2 NvbTEWMBQGCgmS<\/p>\n

JomT8ixkARkWBmxld29yazEiMCAGA1UEAxMZbGV3b3JrLVdJTi1WN VNCTlBTTkZP<\/p>\n

TS1DQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBA NbilH1FFCE8UH\/Y<\/p>\n

ye8E0jMeDqjIEtAowvmu2yKbU+adKUJHo+gMYaL\/3dXjFFI5Tr++WC<\/p>\n

\/QROIbVAub<\/p>\n

RzCZudGFQ2OKbr\/yJ3mt6adB\/VmdmGljX+2c1hmRHZcnuMyjnx7J\/x qwkBlWxMpp<\/p>\n

uP58VoaSJxQtUr\/aO9dR53NsAa3pDcKYKfgWtNpCCa43YtY2x2pzn pe4OOmQ1ufs<\/p>\n

JENjJwA1e73Uq+TxKRKRRsE92SVxefbgSsOzO8Pg4Hyk1B2pIx267e YQFMngHlq2<\/p>\n

ojd003HsMBtGU68F3IZRpyX+njpb28PANOL1MgVIRCT5HpddtV6R0 Uvj84mBp0q0<\/p>\n

6CwPWA8CAwEAAaNRME8wCwYDVR0PBAQDAgGGMA8GA1UdEw EB\/wQFMAMBAf8wHQYD<\/p>\n

VR0OBBYEFNMUY0FWH8vE5hsr5ZD9hrGF46rQMBAGCSsGAQQBgj cVAQQDAgEAMA0G<\/p>\n

CSqGSIb3DQEBCwUAA4IBAQCj3EgCh4O7AutmMZE0\/3UjOpz2o+G<\/p>\n

VIpym9V9JJGQw<\/p>\n

z3rmmKtFO7G\/\/YjjEN+bBmiDTUrmXTzar7RK8Vu2mLs+XqZipEE\/G mcmdraZjQQD<\/p>\n

2u3QZjKWFnLom1IIArbeIw9Mq6ZEr2cxsKI+biIg5YTpGjggyRrAHdFId OInFYol<\/p>\n

Zj50okNMZ+D7NJ83GupFCfFT7p4Glh2zL89a9u5qae9WE95y1G8fU 30linQbCed2<\/p>\n

ddCWWwU1+Jn5eEm0cAX5ogrY+UwqiYYBegWYLcxpndl\/xLTGBYx7 o7Sk2VMpHFO4<\/p>\n

mPfPzpZ22rgS+Cvd7+S3nAvb22ygg1L+jMF63z8SFIP\/ END<\/p>\n

CERTIFICATE—–<\/p>\n

CertUtil: -ca.cert \u547d\u4ee4\u6210\u529f\u5b8c\u6210\u3002<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Windows Server 2016 \u5b89\u88c5 AD \u5e76\u5f00\u542f SSL AD \u662f Active Directory […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-811","post","type-post","status-publish","format-standard","hentry","category-windows"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=811"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/811\/revisions"}],"predecessor-version":[{"id":849,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/811\/revisions\/849"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}