Installing an SSL in Windows Server 2008 - Cisco
Introduction=============This document covers the installation and configuration of the required software componentsThat is essential for achieving a Single Sign-On (SSO) solution with Cisco UnifiedCommunications Manager/Unity Connection 10.0 and above.Author ======A.M. Mahesh BabuTAC Engineer –Unified Communications Cisco Systems Pre-requisites =============Windows 2008 R2 Server is installed, added to the domain and configured for networking and other basic services References ========= an SSL in Windows Server 2008Click Start -> All Programs -> Administrative Tools -> Server Manager. In the Server Manager window, scroll down to Roles Summary, and then click Add Roles. The Add Roles Wizard will start with a Before You Begin page.Select Web Server (IIS) on the Select Server Roles page. An introductory page will open with links for further information.Note: When you use the Add Roles Wizard to install IIS, you get the default installation, which has a minimum set of role services. If you need additional IIS role services, such as Application Development or Health and Diagnostics, make sure to select the check boxes associated with those features in the Select Role Services page of the wizard.Select the IIS services to be installed on the Select Role Services page. Add only the modules necessary. In this case, is selected, and a description of appears in the right pane. Once desired modules are added, click Next.Add any required role servicesIIS is now installed with a default configuration for hosting on Windows Server. Click Close to complete the process.Installing an self signed SSL Certificate in Windows Server 2008 R2 (IIS 7.0)Click on the Start menu, go to Administrative Tools, and click on Internet Information Services (IIS) Manager.Click on the name of the server in the Connections column on the left. Double-click on Server Certificates. In the Actions column on the right, click on Create Self-Signed Certificate...Enter name and then click OKYou will now have an IIS Self Signed Certificate under Server Certificates. The certificate common name (Issued To) is the server name. Now we just need to bind the Self signed certificate to the IIS siteBinding the Self Signed CertificateIn the Connections column on the left, expand the sites folder and click on the website that you want to bind the certificate to. Click on Bindings... in the right column.Click on the Add... button.Change the Type to https and then select the SSL certificate that you just installed. Click OK.You will now see the binding for port 443 listed. Click Close.ADFS Installation Download the ADFS 2.0 from: you launch the install program, click Next.Accept the license and click Next.4. On the Server Role screen, choose Federation Server and click Next.5. The wizard will automatically install the required prerequisites.? Click Next to begin the installation.When the installation is complete,? click the Finish buttonADFS configuration launch the AD FS configuration wizard, just go into Administrative Tools and click on AD FS 2.0 Management.When the AD FS Management Console opens, click the AD FS 2.0 Federation Server Configuration Wizard LinkSelect the option to Create a new Federation ServiceOn the next screen select New federation server farm.? Choose this option unless you are absolutely sure you’ll never be installing a second AD FS server.? It gives you more options down the road if you want to add redundancy.On the Federation Service name, SSL Certificate and Federation Service name info taken whatever created Self Signed Certificate in above [Section need to add here]. Then Click on Next.You must then specify a Service Account in Active Directory that will be used by AD FS.Click on Browse ButtonClick on Advanced Button, then click on Find Now button Select Administrator, then click on OK buttonIn Specify Service Account, Enter the Password then Click on Next buttonClick on Next buttonOn the Summary Screen review the changes that will be made and click next to begin the configurationWhen the installation is complete, click Close.SAML SSO configuration and Adding Relying Party TrustLaunch ADFS 2.0 from menu ProgramsSelect Add Relying Party Trust Click on Start buttonSelect option “Import data about the relying party from a file” and choose the “sp” metadata file from desktop which you downloaded from Call Manager. Then, click on Next…Note: SP metadata you need to download from the Call Manager from SystemSingle Sign On Page. Which you can download while enabling SAML SSO. Enter Display name and Click on Next…Choose “Permit All Users to access this relying party” then click on Next….Review the setting and click on Next…Click on Close …. And ensure Check box enabled to add the Claim Rules…Click on Add Rule…Click on Next button with default Claim Rule template “Send LDAP Attributes as Claims”In Configure Rule, enter the Claim Rule name, select Attribute store as “Active Directory” and then configure LDAP Attribute and Outgoing Claim Types. Click on Finish …Note: “uid” should be small letters.Click on Add Rule create one Custom RuleClick on NextCopy this Custome Rule and modify the ADFS and CUCM details ( highlighted values)c:[Type == ""] => issue(Type = "", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType, Properties[""] = "urn:oasis:names:tc:SAML:2.0:nameid-format:transient", Properties[""] = "", Properties[""] = "CUCM-PUB-10.lab.in");Click on Finish buttonClick on Apply followed by OK….Restart the ADFS 2.0 service from Services.(Steps 1 to 16 has to be followed again if you are adding Unity connection for SAML SSO) To download idp metadata, just run below link on ADFS server browser IP>/FederationMetadata/2007-06/FederationMetadata.xmlTo make sure connection between AD and ADFS, just run below link ................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related searches
- windows server password tool
- windows server 2016 ubuntu shell
- windows server tcp connection limits
- windows server 2019 microsoft edge
- microsoft edge for windows server 2016
- microsoft edge for windows server 2019
- windows server 2019 edge install
- edge browser for windows server 2012
- microsoft edge windows server 2012
- edge for server 2008 r2
- windows server 2016 fonts
- download microsoft windows server 2016