UniToken Integration Guide Windows 2008 Server Smart Card Configuration

From SecuTech Wiki
Jump to navigationJump to search


Network configuration

Click on the start button, and choose “Server Manager”

Click on [View Network Connections] on the right of the window.

Right-click on the icon of the connection between clients and the server and select “Properties”

In the properties window of the connection, select “Internet Protocol (TCP/IPv4)” and click on the “properties” button just below.

In the Internet Protocol (TCP/IP) Properties window, select [Use the following IP address] and input the static IP address, subnet mask and default gateway for your server.

For DNS settings, select [Use the following DNS server addresses] and input the same IP address as your static IP address.(We will use this server as the main DNS server)

Active Directory Installation

In the start menu, choose “Run…”

Wait while the binaries for Active Directory Services are being installed.

On the Active directory wizard welcome screen, click on [Next]

On the screen [Operating system compatibility], click on [next].

On the screen [Choose a Deployment Configuration], Verify that [Create a new domain in a new forest] is selected and click [Next]

On the screen [Name the Forest Root Domain], input a name for your domain and click on [Next]

On the screen [Set Forest Functional level(1)], keep the default settings and click on [Next]

On the screen [Set Forest Functional level(2)], keep the default settings and click on [Next]

In the screen [Additional Domain Controller Options], make sure that the option [DNS Server] is checked and click on [Next]

In the dialog box [Active Directory Domain Services Installation Wizard], click on the button [Yes] when you are asked [Do you want to continue?]

Please note, in this tutorial, we suppose that the preferred DNS on the local network is our server and that DNS information are distributed to clients by the DHCP service installed on this server.

On the [Location for Database, Log files, and SYSVOL], click on [Next]

In the screen [Directory Service Restore Mode Administrator Password], set the password for the administrator of the restore mode and click on [Next].

In the screen [Summary], verify the settings that you have input until now and click on [Next].

Wait until the configuration of Active Directory ends.

This screen reports if Active Directory has been installed correctly or not. Check that there is no error and click [Finish] to close the wizard.

Certification Authority Installation

Secure Access to Certsrv with SSL

Create the user in Active Directory

Set access rights for certificate templates