How to Install a Windows Server 2003 Enterprise CA

  • Article

 

This topic explains how to install a Windows Server 2003 Enterprise CA for the purposes of setting up a PKI/Exchange test environment.

The computer account and domain names used in this procedure are based on the test environment described in Implementing an Exchange 2003-Based Message Security System in a Test Environment.

Before You Begin

Either at the console or through a terminal session, log on to CONT-CA01 as a member of the Enterprise Administrators and Domain Administrators groups.

Procedure

To install a Windows Server 2003 enterprise CA

  1. Click Start, point to Control Panel, and then click Add or Remove Programs.

  2. In Add or Remove Programs, click Add/Remove Windows Components.

  3. In the Windows Components Wizard, under Components, select Certificate Services.

  4. Read the warning about domain membership, and then click Yes.

  5. Click Next.

  6. On the CA Type page, click Enterprise root CA, and then click Next.

  7. On the CA Identifying Information page, in the Common name for this CA box, type CONT-CA01, and then click Next.

  8. On the Certificate Database Settings page, accept the defaults in the Certificate database box and the Certificate database log box, and then click Next.

  9. When prompted to stop Internet Information Services, click Yes.

  10. When asked if you want to enable Active Server Pages (ASP), click Yes.

    Note

    Selecting Yes enables Active Server Pages in Certificate Services. In most cases, this installation is acceptable for an isolated test environment. However, if you plan to connect your test environment to your production network, consult your organization's security policy to determine if this configuration is appropriate.

  11. After the wizard completes the installation, click Finish.