IIS and Server: Installing Server, IIS, and Certificate Services
1. Installing Server 2003. You can download server 2003 trial
here. Before you can download the trail software you must create a
Windows Live ID. You will have to verify ownership of the email address
before Microsoft will send you other information. After you create your
ID you will receive an informative email from Microsoft followed by a
conformation email. The conformation email will contain the link to
download the trail, the product code, and an installation instruction
You must download two ISO files and burn the ISO image to a disk You
will need to CDs since the files are rather large. Label the disks 1 and
2 for you will need to know the difference during the installation
process and for future reference.
After creating both disks and writing down the product code install
server 2003 following regular OS installation procedures.
To complete the installation process you must install any drivers you
machine will need. To get the full 180 days of use out of this trail you
must register with Microsoft. This can be done over the Internet or
phone. The Internet registration process is far less tedious for
registering over the phone you will interact with an automated operator.
If you have any problems download or installing the OS you can reference
the links that are included in the confirmation email for detailed
2. Installing IIS 6.0. The installation of IIS will be done
through the Manage Your Server (MYS) console. To open MYS click the
Start button and select Manager Your Server.
Once at the main MYS window click Add or Remove a Role.
You will be prompted with a brief check list of items that must be
completed or on hand to complete the installation of a role to your
server. Click Next to continue.
After the wizard scans your server to obtain its settings you will be
allowed to select the role you wish to add. Select Application Server (IIS,
ASP.NET) and click Next.
The next step is to install additional tools with IIS. This is done
because by default IIS only installs tools that are required to service
static content. You have the option to install Front Page Server
Extensions and enable ASP.NET, which should not be done until it is
determined that they are required. Not installing them at this time will
ensure your server is that much more secure because it is one less
component you have to secure. Click Next to continue.
You will now be presented with a summary of IIS selections that will be
installed. If you wish to change anything you can use the Back button.
To complete the IIS installation process click Next.
After IIS is installed you will be presented with a window stating that
your server is now an application server and the installation wizard is
complete. Click Finish to close the wizard.
Now you will see the Application role in the MYS window.
3. Installing Certificate Services. Since the certificate service
is a separate windows component it has to be installed through the Add
or Remove Programs option found in the Control Panel. Once you open the
Add or Remove Programs window click on the Add/Remove Windows Components
on the left hand side of the window. This will open the Windows
Once in the Windows Component Wizard click on Certificate Services
A warning dialog box will appear to inform you that once Certificate
Services is installed you will not be able to change the machine's name
or domain membership. Click Yes to acknowledge this and continue with
the installation process.
Click the Details button to view the Certificate Services subcomponents
and ensure that both components are selected to install.
When you are finished click OK to return to the Windows Component
Once back at the Windows Component Wizard click Next to continue the
installation process. This will bring to the configuration of the
Certificate Service. You will now select the type of Certificate
Authority you want to set up. Select Stand-alone root CA and click Next.
Next, you will be prompted for information to identify the CA. Enter the
Common Name for this CA and Distinguished name Suffix. For the common
name you can use your server's name, in the example it is server03r2,
and for he Distinguished name suffix use certsrv. Click Next to
Now you will select the locations for the certificate database, database
log, and shard folder. The defaults for the database and log is %windir%/system32/Certlog.
The default location for the shared folder is %server name%/CertConfig.
Keep these settings and click Next to continue.
A warning dialog box will appear to inform you that to complete the
installation of the Certificate Services IIS must be temporarily
stopped. Click Yes to stop the service and install the Certificate
Services. Another warning box will appear to inform you that Active
Server Pages (ASP) must be enabled in IIS in order to allow Certificate
Services to provide web enrollment services. Click Yes to enable and
complete the installation.
To access the Web Enrollment Support component in a browser type