hmLoadTopic({
hmKeywords:"使用自訂憑證,Windows PKI",
hmTitle:"搭配 ESET PROTECT On-Prem 的自訂憑證",
hmDescription:"如果您在環境內有自己的 PKI (公開金鑰基礎結構)，而且想要 ESET PROTECT On-Prem 使用您的自訂憑證在其元件之間進行通訊，請參閱以下範例。此範例會在 Windows Server 2025 上執行。螢幕擷取畫面可能因 Windows 版本而異，但一般程序維持不變。",
hmPrevLink:"set_new_era_server_certificate.html",
hmNextLink:"use_custom_certificates.html",
hmParentLink:"admin_cert_peers.html",
hmBreadCrumbs:"<a href=\"using.html\">使用 ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem 主功能表<\/a> &gt; 其他 &gt; <a href=\"admin_certificates.html\">憑證<\/a> &gt; <a href=\"admin_cert_peers.html\">對等憑證<\/a>",
hmTitlePath:"使用 ESET PROTECT On-Prem > ESET PROTECT On-Prem 主功能表 > 其他 > 憑證 > 對等憑證 > 搭配 ESET PROTECT On-Prem 的自訂憑證",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">搭配 ESET PROTECT On-Prem 的自訂憑證<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">如果您在環境內有自己的 PKI (公開金鑰基礎結構)，而且想要 ESET PROTECT On-Prem 使用您的自訂憑證在其元件之間進行通訊，請參閱以下範例。此範例會在 Windows Server 2025 上執行。螢幕擷取畫面可能因 Windows 版本而異，但一般程序維持不變。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_warning\" >\n\r<tr class=\"Table_warning\">\n\r<td class=\"Table_warning\" style=\"width:4px; background-color:#E04239;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_warning\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"警告\" title=\"警告\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/warning.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_warning\"><p class=\"p_Normal\">請勿使用有效性短的憑證 (例如 Let\'s Encrypt 的有效性為 90 天)，以避開其頻繁替換的複雜過程。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"注意\" title=\"注意\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>您可以使用 OpenSSL 建立新的自我簽署憑證。如需詳細資訊，請參閱我們的<a href=\"https:\/\/support.eset.com\/kb8274\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">知識庫文章<\/a>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>如需在 ESET PROTECT On-Prem 中使用自訂憑證的逐步指示，<a href=\"use_custom_certificates.html\" class=\"topiclink\">請參閱下一章節<\/a>。<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\">必要伺服器角色：<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Active Directory 網域服務。<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>已安裝 Stand-Alone Root CA 的 Active Directory 憑證服務。<\/p>\n\r<p class=\"p_Normal\">請遵循下列步驟以建立自訂憑證：<\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\"><a href=\"custom_certificates.html#1\" class=\"topiclink hmlinklistitem\">1.開啟管理主控台，然後新增憑證嵌入式管理單元<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\"><a href=\"custom_certificates.html#2\" class=\"topiclink hmlinklistitem\">2.建立 [自訂憑證要求]：<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\"><a href=\"custom_certificates.html#3\" class=\"topiclink hmlinklistitem\">3.匯入您的自訂憑證要求<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\"><a href=\"custom_certificates.html#4\" class=\"topiclink hmlinklistitem\">4.將 [發出的自訂憑證] 匯出至 .tmp 檔案。<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\"><a href=\"custom_certificates.html#5\" class=\"topiclink hmlinklistitem\">5.匯入 .tmp 檔案。<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\"><a href=\"custom_certificates.html#6\" class=\"topiclink hmlinklistitem\">6.將包括私密金鑰的憑證匯出至 .pfx 檔案。<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalList\"><a href=\"custom_certificates.html#7\" class=\"topiclink hmlinklistitem\">7.匯出憑證授權單位：<\/a><\/span><\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"1\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">1.開啟管理主控台，然後新增憑證嵌入式管理單元<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>以本機管理員群組的成員身分登入伺服器。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>執行 mmc.exe 來開啟管理主控台。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>按一下 <span class=\"f_UI\">[檔案]<\/span>，然後選取 <span class=\"f_UI\">[新增\/移除嵌入式管理單元...]<\/span> (或按 <span class=\"f_UI\">CTRL+M<\/span>)。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>在左窗格中選取 <span class=\"f_UI\">[憑證]<\/span>，然後按一下 <span class=\"f_UI\">[新增]<\/span>。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"新增憑證\" title=\"新增憑證\" width=\"786\" height=\"546\" style=\"margin:0;width:786px;height:546px;border:none\" src=\".\/images\/using_custom_certificate_01.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>選取 <span class=\"f_UI\">[電腦帳戶]<\/span>，再按 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">6.<\/span>確定已選取 <span class=\"f_UI\">[本機電腦]<\/span> (預設值)，然後按一下 <span class=\"f_UI\">[完成]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">7.<\/span>按一下 <span class=\"f_UI\">[確定]<\/span>。<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"2\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">2.建立 [自訂憑證要求]：<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>按兩下 <span class=\"f_UI\">[憑證] (本機電腦)<\/span> 來展開它。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>用滑鼠右鍵按一下 <span class=\"f_UI\">[個人]<\/span> 並選取 <span class=\"f_UI\">[所有工作]<\/span> &gt; <span class=\"f_UI\">[進階操作]<\/span>，然後選擇 <span class=\"f_UI\">[建立自訂要求]<\/span>。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"建立 [自訂憑證要求]。\" title=\"建立 [自訂憑證要求]。\" width=\"822\" height=\"467\" style=\"margin:0;width:822px;height:467px;border:none\" src=\".\/images\/using_custom_certificate_02.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>憑證註冊精靈視窗即會開啟，請按一下 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>選取 <span class=\"f_UI\">[在沒有註冊原則的情況下繼續]<\/span>，再按一下 <span class=\"f_UI\">[下一步]<\/span> 以繼續。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"無需註冊原則即可繼續。\" title=\"無需註冊原則即可繼續。\" width=\"629\" height=\"461\" style=\"margin:0;width:629px;height:461px;border:none\" src=\".\/images\/using_custom_certificate_03.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>從下拉式清單中選擇 <span class=\"f_UI\">[(沒有範本) CNG 金鑰]<\/span>，並確定已選取 <span class=\"f_UI\">[PKCS #10]<\/span> 要求格式。按一下 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"(沒有範本) CNG 金鑰\" title=\"(沒有範本) CNG 金鑰\" width=\"629\" height=\"461\" style=\"margin:0;width:629px;height:461px;border:none\" src=\".\/images\/using_custom_certificate_04.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">6.<\/span>按一下箭號以展開 <span class=\"f_UI\">[詳細資料]<\/span> 區段並按一下 <span class=\"f_UI\">[內容]<\/span>。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"展開 [詳細資訊] 並按一下 [屬性]。\" title=\"展開 [詳細資訊] 並按一下 [屬性]。\" width=\"629\" height=\"461\" style=\"margin:0;width:629px;height:461px;border:none\" src=\".\/images\/using_custom_certificate_05.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">7.<\/span>在 <span class=\"f_UI\">[一般]<\/span> 索引標籤中，為您的憑證輸入 <span class=\"f_UI\">[易記名稱]<\/span>，您也可以輸入 <span class=\"f_UI\">[說明]<\/span> (選用)。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">8.<\/span>在 <span class=\"f_UI\">[主體]<\/span> 索引標籤的 <span class=\"f_UI\">[主體名稱]<\/span> 區段中，從 <span class=\"f_UI\">[類型]<\/span> 下的下拉式清單中選取 <span class=\"f_UI\">[常用名稱]<\/span>，將 <span class=\"f_CodeHighlighted\">server<\/span> 輸入 <span class=\"f_UI\">[值]<\/span> 欄位，然後按一下 <span class=\"f_UI\">[新增]<\/span>。<span class=\"f_UI\">CN=server<\/span> 將出現在側邊的資訊方塊中。如果您針對 ESET Management 代理程式建立憑證要求，請在 <span class=\"f_UI\">[通訊名稱值]<\/span> 欄位中輸入 <span class=\"f_CodeHighlighted\">agent<\/span>。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"重要\" title=\"重要\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">通用名稱必須包含下列其中一個字串：<span class=\"f_CodeHighlighted\">server<\/span> 或 <span class=\"f_CodeHighlighted\">agent<\/span>，視您要建立的憑證要求而定。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">9.<\/span>在 <span class=\"f_UI\">[替代名稱]<\/span> 區段中，從 <span class=\"f_UI\">[類型]<\/span> 下的下拉清單中選擇 <span class=\"f_UI\">DNS<\/span>，並將 * (星號) 輸入至 <span class=\"f_UI\">[值]<\/span> 欄位，然後按一下 <span class=\"f_UI\">[新增]<\/span> 按鈕。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"重要\" title=\"重要\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">對於 ESET PROTECT 伺服器和所有代理程式，主旨替代名稱 (SAN) 應該定義為「DNS:*」。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img alt=\"替代名稱\" title=\"替代名稱\" width=\"502\" height=\"507\" style=\"margin:0;width:502px;height:507px;border:none\" src=\".\/images\/using_custom_certificate_06.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">10.<\/span> 在 <span class=\"f_UI\">[延伸模組]<\/span> 索引標籤中，請執行下列操作：<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 40px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">a)<\/span>按一下箭頭展開 <span class=\"f_UI\">[金鑰使用方法]<\/span> 區段。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 13px;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"重要\" title=\"重要\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">請務必從 <span class=\"f_UI\">[可用選項]<\/span> 中選取並新增下列 3 個選項：<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">數位簽章<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">金鑰合約<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">金鑰加密<\/span><\/p>\n\r<p class=\"p_Normal\">取消選取 <span class=\"f_UI\">[令這些金鑰使用方法成為關鍵]<\/span> 選項。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img alt=\"金鑰使用方法\" title=\"金鑰使用方法\" width=\"502\" height=\"507\" style=\"margin:0;width:502px;height:507px;border:none\" src=\".\/images\/using_custom_certificate_07.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 40px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">b)<\/span>按一下箭頭展開 <span class=\"f_UI\">[延伸的金鑰使用方法 (應用程式原則)]<\/span> 區段。選取並新增 <span class=\"f_UI\">[伺服器驗證]<\/span> 用於伺服器憑證，或 <span class=\"f_UI\">[用戶端驗證]<\/span> 用於代理程式憑證。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"延伸的金鑰使用方法\" title=\"延伸的金鑰使用方法\" width=\"502\" height=\"507\" style=\"margin:0;width:502px;height:507px;border:none\" src=\".\/images\/using_custom_certificate_07_02.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">11.<\/span> 在 <span class=\"f_UI\">[私密金鑰]<\/span> 索引標籤中，執行下列動作：<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 40px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">a)<\/span>按一下箭頭展開 <span class=\"f_UI\">[密碼編譯服務提供者]<\/span> 區段。會顯示所有密碼編譯服務提供者 (CSP)。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 13px;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"注意\" title=\"注意\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">確保只選取 <span class=\"f_UI\">[RSA，Microsoft 軟體金鑰儲存提供者]<\/span>。取消選取所有其他的 CSP。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 40px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">b)<\/span>展開 <span class=\"f_UI\">[金鑰]<\/span> <span class=\"f_UI\">[選項]<\/span> 區段。在 <span class=\"f_UI\">[金鑰大小]<\/span> 功能表中，設定至少 <span class=\"f_UI\">2048<\/span> 的值。選取 <span class=\"f_UI\">[可匯出私密金鑰]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 40px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">c)<\/span>按一下 <span class=\"f_UI\">[套用]<\/span>，並檢查您的設定。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"私密金鑰設定\" title=\"私密金鑰設定\" width=\"502\" height=\"507\" style=\"margin:0;width:502px;height:507px;border:none\" src=\".\/images\/using_custom_certificate_08.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">12.<\/span> 按一下 <span class=\"f_UI\">[確定]<\/span>。將顯示憑證資訊。按一下 <span class=\"f_UI\">[下一步]<\/span> 按鈕繼續。按一下 <span class=\"f_UI\">[瀏覽]<\/span>，以選取用來儲存憑證簽署要求 (CSR) 的位置。輸入檔案名稱，並確定選取 <span class=\"f_UI\">[Base 64]<\/span>。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"選取將用來儲存憑證簽署要求的位置。\" title=\"選取將用來儲存憑證簽署要求的位置。\" width=\"629\" height=\"461\" style=\"margin:0;width:629px;height:461px;border:none\" src=\".\/images\/using_custom_certificate_09.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">13.<\/span> 按一下 <span class=\"f_UI\">[完成] <\/span>以產生 CSR。<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"3\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">3.匯入您的自訂憑證要求<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>開啟 [伺服器管理員]並按一下 <span class=\"f_UI\">[工具]<\/span> &gt; <span class=\"f_UI\">[憑證授權單位]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>在 <span class=\"f_UI\">[憑證授權單位 (本機)]<\/span> 樹狀結構中，選取 <span class=\"f_UI\">[您的伺服器]<\/span> (通常為 FQDN) &gt; <span class=\"f_UI\">[內容]<\/span>，然後選取 <span class=\"f_UI\">[原則模組]<\/span> 索引標籤。按一下 <span class=\"f_UI\">[內容<\/span> 並選取 <span class=\"f_UI\">[將憑證要求的狀態設定為擱置。系統管理員必須明確發行憑證]<\/span>。否則，其就無法正常運作。按一下 <span class=\"f_UI\">[確定]<\/span>。如果您需要變更此設定，您必須重新啟動 Active Directory 憑證服務。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"將憑證要求狀態設定為擱置中。\" title=\"將憑證要求狀態設定為擱置中。\" width=\"400\" height=\"468\" style=\"margin:0;width:400px;height:468px;border:none\" src=\".\/images\/using_custom_certificate_10.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>在 <span class=\"f_UI\">[憑證授權單位 (本機)]<\/span> 樹狀結構中，以滑鼠右鍵按一下 <span class=\"f_UI\">[您的伺服器 (通常為 FQDN)]<\/span> &gt; <span class=\"f_UI\">[所有工作]<\/span> &gt; <span class=\"f_UI\">[提交新要求]<\/span>，然後瀏覽至您先前在步驟 2 中產生的 <span class=\"f_UI\">CSR<\/span> 檔案。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>憑證將新增至 <span class=\"f_UI\">[擱置的要求]<\/span> 下方。在瀏覽窗格中以滑鼠右鍵按一下 <span class=\"f_UI\">[CSR]<\/span>，並且選取 <span class=\"f_UI\">[所有工作]<\/span> &gt; <span class=\"f_UI\">[問題]<\/span>。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"發行自訂憑證。\" title=\"發行自訂憑證。\" width=\"802\" height=\"458\" style=\"margin:0;width:802px;height:458px;border:none\" src=\".\/images\/using_custom_certificate_11.png\"\/><\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"4\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">4.將 [發出的自訂憑證] 匯出至 .tmp 檔案。<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>選取左窗格中的 <span class=\"f_UI\">[發出的憑證]<\/span>。用滑鼠右鍵按一下您要匯出的憑證，然後按一下 <span class=\"f_UI\">[所有工作]<\/span> &gt; <span class=\"f_UI\">[匯出二進位資料...]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>在 <span class=\"f_UI\">[匯出二進位資料]<\/span> 對話方塊中，從下拉清單中選擇 <span class=\"f_UI\">[二進位檔案憑證]<\/span>。在 <span class=\"f_UI\">[匯出]<\/span> 選項中，按一下 <span class=\"f_UI\">[將二進位資料儲存到檔案]<\/span>，然後按一下 <span class=\"f_UI\">[確定]<\/span>。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"匯出二進位資料。\" title=\"匯出二進位資料。\" width=\"334\" height=\"243\" style=\"margin:0;width:334px;height:243px;border:none\" src=\".\/images\/using_custom_certificate_12.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>在 <span class=\"f_UI\">[儲存二進位資料]<\/span> 對話方塊中，移動至您要儲存憑證的檔案位置，然後按一下 <span class=\"f_UI\">[儲存]<\/span>。<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"5\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">5.匯入 .tmp 檔案。<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>移至 <span class=\"f_UI\">[憑證 (本機電腦)]<\/span> &gt; 用滑鼠右鍵按一下 <span class=\"f_UI\">[個人]<\/span>，選取 <span class=\"f_UI\">[所有工作]<\/span> &gt; <span class=\"f_UI\">[匯入...]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>按一下 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>使用 <span class=\"f_UI\">[瀏覽]<\/span> 找出儲存的 <span class=\"f_Path\">.tmp<\/span> 二進位檔案，然後按一下 <span class=\"f_UI\">[開啟]<\/span>。選取 <span class=\"f_UI\">[將所有憑證放入以下的存放區]<\/span> &gt; <span class=\"f_UI\">[個人]<\/span>。按一下 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>按一下 <span class=\"f_UI\">[完成]<\/span> 匯入憑證。<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"6\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">6.將包括私密金鑰的憑證匯出至 .pfx 檔案。<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>在 <span class=\"f_UI\">[憑證授權單位 (本機)]<\/span> 中展開 <span class=\"f_UI\">[個人]<\/span>並且選取 <span class=\"f_UI\">[憑證]<\/span>，以滑鼠右鍵按一下擊您想履匯出的新憑證，然後選取 <span class=\"f_UI\">[所有工作]<\/span> &gt; <span class=\"f_UI\">[匯出]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>在 <span class=\"f_UI\">[憑證匯出精靈]<\/span> 中，按一下 <span class=\"f_UI\">[是，匯出私密金鑰]<\/span>。(只在私密金鑰標示為可匯出，而且您有私密金鑰存取權時，此選項才會顯示。)<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>在 <span class=\"f_UI\">[匯出檔案格式]<\/span> 下，選取 <span class=\"f_UI\">[Personal Information Exchange -PKCS #12 (.PFX)]<\/span>、選取 <span class=\"f_UI\">[如果可能的話，包含憑證路徑中的所有憑證]<\/span> 核取方塊，再按一下 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<p class=\"p_Normal\"><img alt=\"匯出檔案格式\" title=\"匯出檔案格式\" width=\"535\" height=\"523\" style=\"margin:0;width:535px;height:523px;border:none\" src=\".\/images\/using_custom_certificate_13.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>選取 <span class=\"f_UI\">[密碼]<\/span> 核取方塊，輸入密碼以加密您正要匯出的私密金鑰。在 <span class=\"f_UI\">[確認密碼]<\/span> 中，再次輸入相同密碼，然後按一下 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_warning\" >\n\r<tr class=\"Table_warning\">\n\r<td class=\"Table_warning\" style=\"width:4px; background-color:#E04239;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_warning\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"警告\" title=\"警告\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/warning.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_warning\"><p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>憑證密碼不得包含下列字元：<span class=\"f_CodeHighlighted\">&quot; \\<\/span> 這些字元在代理程式初始化期間會造成嚴重錯誤。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>密碼必須至少包含 14 個字元，且包含下列其中三個類別：小寫字母、大寫字母、數字或特殊字元。我們建議使用不少於 17 個字元的密碼。<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img alt=\"輸入要加密私密金鑰的密碼。\" title=\"輸入要加密私密金鑰的密碼。\" width=\"535\" height=\"523\" style=\"margin:0;width:535px;height:523px;border:none\" src=\".\/images\/using_custom_certificate_14.png\"\/><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>在 <span class=\"f_UI\">[檔案名稱]<\/span> 中，輸入 <span class=\"f_Path\">.pfx<\/span> 檔案的名稱和路徑，而此檔案將儲存已匯出的憑證和私密金鑰。按一下 <span class=\"f_UI\">[下一步]<\/span>，然後按一下 <span class=\"f_UI\">[完成]<\/span>。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"注意\" title=\"注意\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">上面範例顯示如何建立 ESET Management 伺服器憑證。對 ESET PROTECT 伺服器憑證重複相同步驟。<\/p>\n\r<p class=\"p_Normal\">您可以使用此憑證在 Web 主控台中<a href=\"certificates_certificate_era.html\" class=\"topiclink\">簽署其他<\/a>新憑證。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"7\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">7.匯出憑證授權單位：<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>開啟 [伺服器管理員]並按一下 <span class=\"f_UI\">[工具]<\/span> &gt; <span class=\"f_UI\">[憑證授權單位]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>在 <span class=\"f_UI\">[憑證授權單位 (本機)]<\/span> 樹狀結構中，選取 <span class=\"f_UI\">[您的伺服器] (通常為 FQDN)<\/span> &gt; <span class=\"f_UI\">[內容]<\/span> &gt; <span class=\"f_UI\">[一般]<\/span>，然後選取 <span class=\"f_UI\">[檢視憑證]<\/span> 索引標籤。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>在 <span class=\"f_UI\">[詳細資料]<\/span> 索引標籤中按一下 <span class=\"f_UI\">[複製到檔案]<\/span>。<span class=\"f_UI\">[憑證匯出精靈]<\/span> 將會開啟。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>在 <span class=\"f_UI\">[匯出檔案格式]<\/span> 視窗中，選取 <span class=\"f_UI\">[DER 加密二進位檔案 X.509 (.CER)]<\/span> 並按一下 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>按一下 <span class=\"f_UI\">[瀏覽]<\/span>，以選取用來儲存 <span class=\"f_Path\">.cer<\/span> 檔案的位置並按一下 <span class=\"f_UI\">[下一步]<\/span>。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">6.<\/span>按一下 <span class=\"f_UI\">[完成]<\/span> 匯入憑證授權單位。<\/p>"
})
