Prerequisites
Make sure to adhere to the below listed hardware and software prerequisites before continuing with the IIS configuration.
- Windows Server 2008R2, Windows 7 or higher.
- Microsoft Internet Information Services 7.5 or higher (testing done up to IIS 10)
- Securosys Primus HSM V2.6 or higher or CloudHSM with CNG/KSP Provider V1.21.4 or higher, installed and configured.
Add Windows Web Server IIS Role on Windows Server
For this guide, we assume that you have successfully installed Windows Server. Ensure that the Web Server (IIS) role is added; if not, please download and install it before proceeding.
Download the Microsoft IIS Manager via PowerShell (execute with admin privileges).
Install-WindowsFeature -name Web-Server -IncludeManagementTools
HSM Setup and Configuration
- Cloud
- On-premises
With Securosys CloudHSM, the HSM are already configured, no further action needed.
Before we proceed with the installation and configuration of the Microsoft AD CS, it is required to configure the Securosys on-premises Primus HSM.
If you have not yet completed the initial setup wizard for the device, please refer to Chapter 3 of the Primus HSM User Guide for detailed instructions on setting up the HSM.
Ensure that the Primus HSM is updated to the following firmware:
- Primus HSM Firmware v2.6 or higher.
You can download the Securosys Primus HSM firmware from the Securosys Support Portal.
After completing the initial setup (running the initial wizard), ensure that the HSM has the correct network configuration and can be accessed from the host device.