Active Directory with Windows Server 2016 - Installing a Subordinate CA

The video tutorial guides viewers through the process of setting up an enterprise subordinate Certificate Authority (CA) using Server Manager. It covers the installation and configuration steps, including selecting roles, creating a new private key, and configuring Active Directory certificate services. The tutorial emphasizes the importance of having the right credentials and roles for the CA to issue certificates. It also explains how to create a certificate request to communicate with the root CA and finalize the setup.

What is the purpose of creating an enterprise subordinate CA?

• To backup data

• To manage server hardware

• To issue certificates to clients

• To monitor network traffic

Which installation type should be selected for setting up a subordinate CA?

• Hyper-V installation

• Windows update installation

• Remote desktop services installation

• Role-based or feature-based installation

What roles should be added to the subordinate CA for it to issue certificates?

• Active Directory Domain Services

• DNS server and DHCP server

• File server and print server

• Certification authority and web enrollment

What is the recommended key length for the cryptographic provider?

• 1024

• 8192

• 2048

• 4096

What is the best practice hash algorithm for signing certificates?

• SHA-1

• SSHA 256

• SHA-512

• MD5

How should the subordinate CA contact the parent CA to get its certificate?

• By using a USB drive

• By emailing the parent CA

• By calling the parent CA

• By sending a certificate request directly to the parent

What should be done if there is an issue with the settings during the final review?

• Contact technical support

• Restart the server

• Go back and change the settings

• Ignore the issue and proceed