tailieunhanh - Microsoft Press Windows Server 2008 Networking and Network Access Protection (NAP) phần 9

Y tế đăng ký, bấm vào Add Required Role Services Wizard cửa sổ Add Roles xuất hiện, và sau đó kích Next. 5. Nếu bạn chưa cài đặt trước đó vai trò máy chủ Web, bạn được nhắc nhở với các Chọn máy chủ chứng chỉ để sử dụng với trang Y tế Cơ quan đăng ký. Chọn tùy chọn thích hợp, và sau đó kích Next. Hình 16-5 cho thấy một ví dụ. | 646 Windows Server 2008 Networking and Network Access Protection NAP To Configure the Network Policy and Access Services Role on an HRA Computer 1. Run Server Manager on the HRA computer. 2. Under Roles Summary click Add Roles. 3. On the Select Server Roles page select the Network Policy And Access Services check box and then click Next twice. 4. On the Select Role Services page select the Health Registration Authority check box click Add Required Role Services in the Add Roles Wizard window that appears and then click Next. 5. If you have not previously installed the Web Server role you are prompted with the Choose The Certificate Server To Use With The Health Registration Authority page. Choose the appropriate option and then click Next. Figure 16-5 shows an example. Figure 16-5 Example of choosing a certificate server 6. On the Choose Authentication Requirements For The Health Registration Authority page choose either Yes Require Requestors To Be Authenticated As Members Of A Domain for authenticated health certificates or No Allow Anonymous Requests For Health Certificates for anonymous certificate support and then click Next. By enabling anonymous certificates non-domain-joined computers can receive health certificates. Chapter 16 IPsec Enforcement 647 7. On the Choose A Server Authentication Certificate for SSL Encryption page do one of the following Click Choose An Existing Certificate For SSL Encryption and then select the previously installed computer certificate. Click Create A Self-Signed Certificate For SSL Encryption if you are using a very small-scale deployment of NAP or for a test lab. This option requires that you also install the self-signed certificate on all your NAP clients. Click Don t Use SSL Or Choose A Certificate For SSL Encryption Later if you do not want to use SSL or if the computer certificate that you plan to use for SSL encryption has not yet been installed. HTTPS between NAP clients and HRAs is recommended but not required. Figure .