Page History

...

1. Open Server Manager.
2. Click on the name of the Manage menu item and select Add roles and components.
3. In the window Wizard for Adding Roles and Components read the information and click on the Next button.
4. Set the switch to Install roles or components and click on the Next button.
5. Set the switch to Select a server from the server pool.
6. In the table Server pool click on the name of the required server.
7. Click on the Next button.
8. Check the box of the Active Directory Certificate Services.
9. In the window that appears, click on Add components. As a result, a checkbox will be displayed next to the name of the selected server role.
10. Click on the Next button.
11. In the window for the selection of components, click on the Next button.
12. Read the information and click on the Next button.
13. Select the Certificate Center checkbox and click on the Next button.
14. To start the installation process, click Install.
15. Wait for the installation process to complete and click on the [Close] button button.
16. On the left side of the window Server Manager click on the item name Active Directory Certification Services.
17. Click on the exclamation mark.
18. Click on the link Configure Active Directory Certificate Services.
19. Read the information and click on the Next button.
20. Select the Certificate Center checkbox and click on the Next button.
21. Set the switch next to the name of the required CC installation option (in this example, the company's CС is selected) and click Next.
22. Set the switch next to the name of the CC type (in this example, select the Root CC, since this will be the main certification center in the domain). Click on the Next button.
23. In the window for specifying the type of private key, specify the secret key that will be used for the certification center (in this example, select Create a new private key, because a secret key for the certification center has not been created before). Click on the Next button.
24. In the next window, to specify the encryption parameters, select an encryption provider in the drop-down list Select an encryption service provider.
25. In the drop-down list called Key length select the desired value.
26. Click on the name of the required hash algorithm.
27. Click on the Next button.
28. In the window to specify the name of the CC, enter the values of all fields and click on the Next.
    The data entered here is informative. It is recommended to specify them. Abbreviations have the following meaning: "O" — - Organization, "OU" — - Organization Unit, "L" - City (Location), "S" — - State or province, "C" — - Country/region, "E" - E-mail.
29. Enter the validity period of the certificate to create a CC.
    Upon expiration of the CC certificate, it will be necessary to reissue the certificates to all existing users.
30. In the field Location of the certificate database enter the path to the certificate database and click Next.
31. Read the information and click on the Configure button.
32. Wait for the installation process to complete and click on the Close button.

...