Server Certificate Deployment

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016

Follow these steps to install an enterprise root certification authority (CA) and to deploy server certificates for use with PEAP and EAP.


Before you install Active Directory Certificate Services, you must name the computer, configure the computer with a static IP address, and join the computer to the domain. After you install AD CS, you cannot change the computer name or the domain membership of the computer, however you can change the IP address if needed. For more information on how to accomplish these tasks, see the Windows ServerĀ® 2016 Core Network Guide.


The procedures in this guide do not include instructions for cases in which the User Account Control dialog box opens to request your permission to continue. If this dialog box opens while you are performing the procedures in this guide, and if the dialog box was opened in response to your actions, click Continue.