In Part1 we looked at installing the AD CS role on Server 2012. This post will explains the detailed step(s) involved in creating SSL certificates for CRM and ADFS servers in the deployment diagram

Duplicate Certificate Template

Create a certificate template named SSL that will be used in the certificate request. Go to MMC and choose Add/Remove Snap in and select Certificate Templates:

 

 

After the above steps the new created template SSL will be available to create the SSL certificates. For the CRM deployment scenario we will create two certificates viz., xrm.dev.local and sts.dev.local

 

Create Certificate(s):

On the server DEV-CS01 go to https://localhost/certsrv and follow the steps as per the following screen snap shots

 

At this stage the xrm.dev.local SSL certificate has been issued choose Install this certificate and this should install in the Personal\Certificates store for the user from where it can be exported in pfx format so it can be imported on other servers.

 

Repeat the steps above to create sts.dev.local SSL certificate for the ADFS Server

 

 

 

In this post we look at installing AD CS role on Server 2012/2016 so that SSL certificates can be issued for the Dynamics CRM platform in a  multi-server deployment topology as shown here.

Installing AD CS role:

On the server DEV-CS01 bring up the server manager console and go through the Add/Remove Features wizard to install AD CS as per the following screen snap shots.

In the next article here we will look at how to use Certificate Templates to provision new SSL certificates for CRM and ADFS