Warning when installing ADCS

Question

After installing Issuer Ent CA the following warnings were shown

Setup could not add the certification authoruity's computer account to the cert publishers security group

this certificate authority will not be able to publish certificates in active directory

Manually add the certificate authority's computer account to the cert publishers security group in active directory

Setup was unable to install or update the default certificate templates. Ensure you have write permissions on Certificate Templates container in the Forest root domain then manually install the default certificate templates using certutil...

Can you please provide guidance for a resolution?

Answer 1

Add the Certificate Authority's Computer Account to the Cert Publishers Security Group:

a. Log onto a domain controller or a machine with the Active Directory Users and Computers (ADUC) snap-in installed.

b. Open ADUC (dsa.msc).

c. Navigate to the Builtin container/folder.

d. Double-click the Cert Publishers group.

e. Go to the Members tab and click Add.

f. Change the object type to include Computers.

g. Locate and add the computer account of your certificate authority.

h. Click OK to close all open windows.