一、环境：在域环境下一台DC域控制器，IP地址：192.168.10.1
二、要求：安装企业根CA，申请一个用户证书
三、具体步骤：
在DC服务器先安装IIS，再安装证书服务。
![clip_image003[5]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197034yVWQ.jpg)
在Windows组件向导选择”证书服务“
![clip_image006[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197036Zks3.jpg)
![clip_image008[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197038C6Zp.jpg)
选择“企业根CA”
![clip_image011[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_12401970421so7.jpg)
输入CA的公用名称，可以自定义
![clip_image014[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197043KYkY.jpg)
证书数据库保存路径
![clip_image016[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197044KTwk.jpg)
![clip_image018[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197046xqs6.jpg)
![clip_image020[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197050ZQIb.jpg)
点击“完成”证书服务安装成功。
![clip_image022[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197052oYI2.jpg)
打开“证书颁发机构”
![clip_image025[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197053q2ri.jpg)
可以选择“停止证书服务”和“启动证书服务”
![clip_image027[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197054PZo4.jpg)
![clip_image029[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197058Nqbn.jpg)
在客户端电脑打开IE，输入证书申请网站，用域帐号登入去申请用户证书
![clip_image031[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197060OhHO.jpg)
![clip_image033[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197062MN9U.jpg)
点击“提交”证书申请，因为是域环境，证书颁发机构会自动颁发证书
![clip_image035[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197063Q0Ku.jpg)
安装些证书
![clip_image037[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197066P7hd.jpg)
![clip_image039[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197068ccJv.jpg)
查看已颁发的证书
![clip_image041[4]](http://hukunlin.blog.51cto.com/attachment/200904/20/545402_1240197069t4Ap.jpg)
本文转自成功不仅是个人荣誉，更是对家人责任博客51CTO博客，原文链接http://blog.51cto.com/hukunlin/151497如需转载请自行联系原作者
kunlin_hu
