CA Server in Windows 2012:
On the domain Server, open Server Manager and go through to Select Server Roles and
click Active Directory Certificate Services and then click Next…
In the Select Features interface, proceed with Next…
1 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In the Active Directory Certificates Services interface, click Next…
In Select role services, make sure you tick all specially, Certificate Authority and Certification
Authority Web Enrollment check box and then click Next…
2 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In the Web Server Role (IIS) interface, click Next to proceed…
in the Select Role Services, just click Next to proceed…
3 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In the installation selections interface, click Install…
After installation complete, in the Installation progress interface, click Configure Active
Directory Certificate Services on the destination server…
4 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
Make sure Administrator is the member of IIS_IUSRS group if not add them.
In the Credentials interface, verify that your Credentials is Administrator and then click Next…
5 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In the Role Services interface, tick Certification Authority, Certification Authority Web
Enrollment and Online Responder and then click Next…
In the Setup Type interface, verify that Enterprise CA is selected and click Next…
6 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In the CA Type interface, verify that Root CA is selected and then click Next…
Next in the Private Key interface, click Create a new private key and then click Next…
7 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In Cryptography for CA interface, setting which RSA Cryptography with 2048 key length and
verify that SHA256 is selected, and then click Next…
Next in the CA Name interface, just proceed with Next…
8 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In the Validity Period, default should be 5 years, keep the same and then click Next…
In the CA Database interface, just click Next to proceed…
9 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
Next in the Confirmation interface, verify again all the settings and then click Configure…
please wait few minutes for the configuration to complete…
10 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
Finally, our CA & CA Web Enrollment successfully installed and click Close
It will prompt you to Do you want to configure additional role services click Yes
11 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In Credentials interface, verify that your Credentials is Administrator and then click Next…
In the Role Services interface, tick Network Device Enrollment Service, Certification Enrollment
Web Service and Certificate Enrollment Policy Web Service and then click Next…
12 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In Service Account for NDES interface, verify Credentials is Administrator and then click Next…
In RA Information interface, provide the Optional information and click Next to continue.
13 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In Cryptography for NDES interface keep the default setting and click Next...
In CA for CES interface, keep the default setting just click Next to continue
14 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In Authentication Type for CES interface, keep the default Windows integrated authentication
In Service Account for CES interface, verify Credentials is Administrator and then click Next…
15 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
In Authentication Type for CEP interface, keep the default Windows integrated authentication
In Server Certificate interface, Keep the default setting and click Next to continue
16 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
Next in the Confirmation interface, verify again all the settings and then click Configure…
In Progress Interface, wait for moment to install role and features
17 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
Finally, all Roles and Features are installed click Close
From any server in the domain, you can connect to http://192.168.100.230/certsrv. This will
launch the Certificate Authority Web Enrollment portal.
18 | P a g e Created by Ahmad Ali E-Mail: [email protected] , WhatsApp: 00966564303717
