Exchange Server 2013申请证书
1)域:contoso.com,域功能级别和林功能级别为Windows server 2003模式。
2)域控制器:2k1201,Windows2012数据中心版本,5个操作主机角色服务器,CA服务器
3)Exchange2013服务器:2k1202,客户端访问和邮箱服务器
1、 以本地管理员身份登录2k1201服务器
2、 打开服务器管理器
3、 添加角色和功能---选择AD证书服务
650) this.width=650;" border="0" alt="clip_image002" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584907BrLe.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584907BrLe.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />650) this.width=650;" border="0" alt="clip_image004" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584908y0Ft.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584908y0Ft.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
4、 下一步
650) this.width=650;" border="0" alt="clip_image006" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584908zaGk.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584908zaGk.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
5、 下一步
650) this.width=650;" border="0" alt="clip_image008" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584909tE7O.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584909tE7O.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
6、 选择证书颁发机构、证书颁发机构web注册
650) this.width=650;" border="0" alt="clip_image010" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584909hJJU.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584909hJJU.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
7、 下一步
650) this.width=650;" border="0" alt="clip_image012" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849094mS1.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849094mS1.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
8、 下一步
650) this.width=650;" border="0" alt="clip_image014" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584910AfC9.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584910AfC9.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
9、 安装
650) this.width=650;" border="0" alt="clip_image016" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584910M2eV.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584910M2eV.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
10、 选择关闭
650) this.width=650;" border="0" alt="clip_image018" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584910n1VT.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584910n1VT.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
1. 在域控服务器上,选择通知(黄色叹号)---配置目标服务器上的Active Directory证书服务
650) this.width=650;" border="0" alt="clip_image020" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849117jZt.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849117jZt.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
2. 选择下一步
650) this.width=650;" border="0" alt="clip_image022" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584911z2cL.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584911z2cL.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
3. 选择证书颁发机构和证书颁发机构web注册
650) this.width=650;" border="0" alt="clip_image024" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584912b3Pg.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584912b3Pg.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
4. 选择企业CA
650) this.width=650;" border="0" alt="clip_image026" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584912T8II.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584912T8II.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
5. 根CA,下一步
650) this.width=650;" border="0" alt="clip_image028" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584913sbv2.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584913sbv2.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
6. 保持默认,下一步
650) this.width=650;" border="0" alt="clip_image030" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584913lWaj.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584913lWaj.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
7. 保持默认,下一步
650) this.width=650;" border="0" alt="clip_image032" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849149crR.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849149crR.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
8. 下一步
650) this.width=650;" border="0" alt="clip_image034" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584914TP5n.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584914TP5n.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
9. 选择证书默认有效期
650) this.width=650;" border="0" alt="clip_image036" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849152SPf.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849152SPf.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
10. 选择证书存放位置,下一步
650) this.width=650;" border="0" alt="clip_image038" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584915RCGc.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584915RCGc.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
11. 选择配置
650) this.width=650;" border="0" alt="clip_image040" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584916KGnT.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584916KGnT.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
12. 选择关闭
650) this.width=650;" border="0" alt="clip_image042" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584916ZsvM.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584916ZsvM.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
1. 通过浏览到 https://<客户端访问服务器的 FQDN>/ECP 打开 EAC,这里客户端访问服务为2k1202
2. 输入域管理员和密码
3. 转到“服务器”>“证书”。 在“证书”页面,确保在“选择服务器”字段中选择了客户端访问服务器,然后单击“添加”。
650) this.width=650;" border="0" alt="clip_image044" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584916916P.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584916916P.jpg" height="212" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
4. 在“新建 Exchange 证书”向导中,选择“创建从证书颁发机构获取证书的请求”,然后单击“下一步”。
650) this.width=650;" border="0" alt="clip_image046" src="http://img1.51cto.com/attachment/201303/18/1410070_136358491749eM.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_136358491749eM.jpg" height="384" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
5. 指定此证书的名称,然后单击“下一步”。
650) this.width=650;" border="0" alt="clip_image048" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584917uI0D.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584917uI0D.jpg" height="381" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
6. 保持默认,下一步
650) this.width=650;" border="0" alt="clip_image050" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849178eop.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849178eop.jpg" height="384" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
7. 选择浏览
650) this.width=650;" border="0" alt="clip_image052" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584918sYvn.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584918sYvn.jpg" height="385" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
8. 选择当前服务器
650) this.width=650;" border="0" alt="clip_image053" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584918wmKh.png" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584918wmKh.png" height="587" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
9. 为列表中显示的每个服务指定用户将用来连接到 Exchange 服务器的外部或内部服务器名称。 例如,对于“Outlook Web App (从 Internet 访问)”,您可以指定 owa.contoso.com。 对于“OWA (从 Intranet 访问)”,您可以指定 CAS02.corp.contoso.com。这些域将用于创建 SSL 证书申请。单击“下一步”。
650) this.width=650;" border="0" alt="clip_image055" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584919iZx2.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584919iZx2.jpg" height="379" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
650) this.width=650;" border="0" alt="clip_image057" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849194XLB.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849194XLB.jpg" height="379" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
650) this.width=650;" border="0" alt="clip_image059" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584919lcv9.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584919lcv9.jpg" height="324" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
10. 下一步
650) this.width=650;" border="0" alt="clip_image061" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584920lHna.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584920lHna.jpg" height="383" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
11. 设置公用名
650) this.width=650;" border="0" alt="clip_image063" src="http://img1.51cto.com/attachment/201303/18/1410070_136358492030dn.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_136358492030dn.jpg" height="383" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
12. 输入相关组织名称、部门名等,下一步
650) this.width=650;" border="0" alt="clip_image065" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584920gVUH.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584920gVUH.jpg" height="382" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
13. 选择证书保存网络位置和名字,完成。
注意:此路径必须为共享路径(例如: 14. 打开CA证书web连接 650) this.width=650;" border="0" alt="clip_image067" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584921l6W1.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584921l6W1.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
15. 选择高级证书申请
650) this.width=650;" border="0" alt="clip_image069" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584921W9i3.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584921W9i3.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
16. 选择“使用base64编码的…”
650) this.width=650;" border="0" alt="clip_image071" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849211WY9.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849211WY9.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
17. 使用记事本打开刚才生成的req文件,复制如图内容
650) this.width=650;" border="0" alt="clip_image073" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584922ipPb.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584922ipPb.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
18. 将17步骤中的内容粘贴到“Base-64编码的证书申请”中,证书模板选择“Web服务器”,点击提交
650) this.width=650;" border="0" alt="clip_image075" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584922oXRa.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584922oXRa.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
19. 选择下载证书
650) this.width=650;" border="0" alt="clip_image077" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584922twXr.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584922twXr.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
20. 将证书文件保持到共享路径硬盘上。
650) this.width=650;" border="0" alt="clip_image079" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584923vh1H.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584923vh1H.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
1 通过浏览到 https://<客户端访问服务器的 FQDN>/ECP 打开 EAC,这里客户端访问服务为2k1202
2 输入域管理员和密码
3 在 EAC 的“服务器”>“证书”页面,选择您在之前步骤中创建的证书申请。在证书申请的详细信息窗格中,单击“状态”下面的“完成”。
650) this.width=650;" border="0" alt="clip_image081" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584923nQSv.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584923nQSv.jpg" height="242" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
4 输入申请证书的共享路径
650) this.width=650;" border="0" alt="clip_image083" src="http://img1.51cto.com/attachment/201303/18/1410070_136358492399Zh.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_136358492399Zh.jpg" height="463" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
5 检查当前证书
650) this.width=650;" border="0" alt="clip_image085" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584923HbiN.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584923HbiN.jpg" height="297" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
6
1. 选择您刚添加的新证书,然后单击“编辑”650) this.width=650;" border="0" alt="clip_image086" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849248Lsu.gif" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849248Lsu.gif" height="15" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />。
650) this.width=650;" border="0" alt="clip_image088" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584924SIBo.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584924SIBo.jpg" height="295" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
2. 选择服务
650) this.width=650;" border="0" alt="clip_image090" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584924Ptsj.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584924Ptsj.jpg" height="459" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
3. 选择相应服务,保存即可
650) this.width=650;" border="0" alt="clip_image092" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584924Lwf5.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584924Lwf5.jpg" height="460" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
4. 检查证书分配的服务
650) this.width=650;" border="0" alt="clip_image094" src="http://img1.51cto.com/attachment/201303/18/1410070_13635849258Imd.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_13635849258Imd.jpg" height="328" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
5. 在加入域的客户端上打开OWA界面,没有提示证书问题
650) this.width=650;" border="0" alt="clip_image096" src="http://img1.51cto.com/attachment/201303/18/1410070_1363584925nO1o.jpg" real_src ="http://img1.51cto.com/attachment/201303/18/1410070_1363584925nO1o.jpg" height="447" style="padding: 0px; margin: 0px; vertical-align: top; background-image: none;" title="Exchange Server 2013申请证书" />
欢迎关注我的微博 http://weibo.com/pco18
您的顶帖是我发帖的动力↘