Configure ADCS

Installation

Go to Server Manager > Add Roles and Features > Select ADCS.

NOTE: If you're following the guide, make a snapshot before installing ADCS. We will have to go back when we want to try out ESC8 and ESC11.

Select only "Certification Authority".

When that finishes, click on the yellow warning and click on "Configure ADCS". Select to configure "Certification Authority", selecting "Enterprise CA".

Select "Root CA" and say it to create a new private key. Leave the cryptographic options by default and rename the CA as you wish (I'll leave it as boxcreator-DC01-CA). Set the specific validity period for a long time if you plan on submitting this to HTB (I usually assign 999 years, which is the maximum it allows).

Leave by default the rest and everything is ready to configure!

Written by ruycr4ft