As the title suggests, I'm trying to set up a new Windows domain. Seemingly a simple thing, and one I've already done before, but this time around, management wants this to be synced up with Office 365 and generally be publicly accessible.
OK, well, we have the domain name registered, and we bought a wildcard SSL certificate to go along with this. I've already got the basic DC server ready.
Now, I'd like to set up a proper CA for this domain. I was hoping a wildcard certificate would be enough to let such a CA create valid certificates for whatever else I may need that will be in this domain.
Unfortunately, I'm having some issue, and I can't really find a guide on how to do this. Specifically, when configuring the CA I can't actually use the certificate ("imported certificate does not match chosen CA type"). So, is what I'm planning to do even possible? It seems like it should, but the error suggests otherwise.
Can someone point me in the right direction, please?
I've just found this ServerFault question, which appears to answer the basic question of "can I use the wildcard to sign new certificates?". The answer, sadly, appears to be "no". That said, I'd still like to know what my options are to make things nice and smooth on the new domain.