1. From the Server Manager Dashboard click Add roles and features.
On the Add Roles and Features Wizard, read the Before you begin information and click Next.
2. On the Select Installation Type step, select the Role-based or feature-based installationoption
and click Next.
and click Next.
3. On the Select Destination Server step, enable the Select a server from the server pooloption,
select your server, and click Next.
select your server, and click Next.
4. On the Select Server Roles step, select the Active Directory Certificate Servicesoption and
click Next.
click Next.
5. On the Add Roles and Features Wizard notice, click Add Features to install roles, services, and
features that are needed by Active Directory Certificate Services.
features that are needed by Active Directory Certificate Services.
6. On the Select Features step, enable the .NET Framework 3.5 Features option (if it is not already
installed, then leave it as it is). Active Directory 2012 requires .NET Framework 3.5 be installed.
Click Next.
installed, then leave it as it is). Active Directory 2012 requires .NET Framework 3.5 be installed.
Click Next.
7. On the Active Directory Lightweight Directory Services step, click Next.
8. On the Select role services step, Select Certification Authority and Certification Authority Web
Enrollment options, click Next.
Enrollment options, click Next.
9. On the Confirm Installation Selections step, review your selections, and click Install
10. Wait for successful completion of the installation. Do not close the wizard. On successful
completion, click the Configure Active Directory Certificate Services on the destination
server.
completion, click the Configure Active Directory Certificate Services on the destination
server.
11. Above step will open the AD CS Configuration popup, On the Credentials step keep current user
or change the credentials, click Next.
or change the credentials, click Next.
12. On the Role Services step, Select Certification Authority and Certification Authority Web
Enrollment, click Next.
Enrollment, click Next.
13. On the Setup Type step, Select Enterprise CA option, click Next.
14. On the CA Type step, Select Root CAoption, click Next.
15. On the Private Key step, Select Create a new private key option, click Next.
16. On the Cryptography for CA step, keep default options, click Next.
17. On the CA Name step, keep default name, click Next.
18. On the Validity Period step, Fill validity as per your requirement (default 5years), click Next.
19. On the CA Database step, Note the DB path, click Next.
20. On the Confirmation step, review your options, click Configure.
21. On Configuration succeeded, click close and then reboots the system.
0 comments:
Post a Comment