Step by Step guide for Installing Active directory Certificate Authority in Windows Server 2012 R2

Installing Active Directory Certificate Authority in Windows Server 2012 R2

In this post, we will learn how do we install  Active Directory Certificate Authority in Windows Server 2012 R2, to Verify if the certificate service is already installed, use the below command:

Get-WindowsFeature  | where name -like *AD*

Now when we see that the certificate authority is not installed, we can install the same using the below CMD:

Add-WindowsFeature AD-Certificate –IncludeAllSubFeature

Once we see the exit code as a success, we are ready to go to server manager and complete the post install steps.

Post install steps are stright forward just hit next next unless you have specific instruction.

You can select SHA256 or whatever recommended by your security team, I will continue with the sha1 as this is my lab machine.

Your Certificate Authority is ready to accept the certificate request.

I installed this on my LAB DC where I setup the DNS record as PKI.letsexchange.in to give it a production like feel J

Next, let's Create the Certificate request from the exchange and request the certificate authority for the certificate.

Next Part - Step by Step guide for requesting and Installing Certificate from internal CA on Exchange 2016