Windows CA Set UP - PKCS

James Chan_110 450

Hi All,

I am following below guide to set up.

https://learn.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure#requirements

And I have an issue on below item " Active Directory Certificate Services Step-by-Step Guide".

User's image

After I clicked to this link, there are a lot of steps. Please tell me which steps I need to do, which I don't need to do?

Thanks.

James Chan_110 450 Reputation points

2024-01-05T03:13:35.4333333+00:00

Thanks for your reply.

I have one more question. I want to configure PKCS for the CA server. So I used this link to learn https://learn.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure#requirements

Then, when I read the "Requirements", which is the picture below. It says if user need to configure a PKCS credential, first, you need to create 2 roles, which are "Active Directory Domain" & "Certificate Authority"

Question 1: Regarding "Certificate Authority", does it mean that I only need to install a CA server (i.e add a CA role in the server manager" and do not need to do other things, such as following the "Certificate Service Step-by-Step Guide.

Thanks.
Anonymous

2024-01-05T05:59:59.29+00:00

Hello James Chan_110,

Thank you for your reply.

Regarding "Certificate Authority", does it mean that I only need to install a CA server？
Yes. however, after adding a CA role in the server manager, you will need to configure it. If you do not know how to configure it, you can view the Certificate Service Step-by-Step Guide.

If you have any questions or concerns, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer accepted by question author

Anonymous

2024-01-05T02:34:22.2633333+00:00

Hello James Chan_110,

Thank you for posting in Q&A forum.

For AD DS, you can follow the steps "To install AD DS by using Server Manager" in the link.

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/install-active-directory-domain-services--level-100-#BKMK_GUI

For AD CS, you can follow one of the two links.

The Windows Server® 2012 step-by-step guidance is located at Test Lab Guide: Deploying an AD CS Two-Tier PKI Hierarchy.

Or

A Windows Server® 2008 R2 step-by-step guide is located on the TechNet Wiki as Step by Step Guide - Single Tier PKI Hierarchy Deployment.

If you follow link the first link, you need these steps below.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

0 additional answers

Your answer