Checklist: Deploy a NAP CA

Updated: February 29, 2012

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

This parent checklist includes cross-reference links to important concepts about deploying a NAP certification authority (CA). It also contains links to subordinate checklists that will help you complete the required tasks. Perform these tasks after you have completed lab testing of NAP.

Complete the tasks in this checklist in order. When a reference link takes you to a conceptual topic or to a subordinate checklist, return to this topic after you review the conceptual topic or you complete the tasks in the subordinate checklist so that you can proceed with the remaining tasks in this checklist.

Checklist Checklist: Deploy a NAP CA


  Task Reference

Review concepts and examples for the Health Registration Authority (HRA) server.

Conceptual topic Planning the Placement of a NAP CA Server

Conceptual topic Planning Redundancy for a NAP CA Server

Conceptual topic Capacity Planning for NAP CAs


Review the hardware, software, network, and client requirements for the NAP CA.

Conceptual topic Appendix A: NAP Requirements


Install Active Directory Certificate Services (AD CS) on a NAP CA server.

This guide includes procedures for installing a standalone or an enterprise NAP CA. Configuration differs slightly for each. In its recommended configuration, the NAP CA is a dedicated standalone subordinate CA.

Checklist topic Install a NAP CA


Configure health certificate exemptions and templates.

Perform these procedures on an enterprise CA. The enterprise CA can be used to issue NAP health certificates or NAP exemption certificates.

Checklist topic Create an IPsec NAP Exemption Group

Checklist topic Create Health Certificate Templates

Checklist topic Publish NAP Certificate Templates

Checklist topic Configure Template Validity Period


Configure NAP CA properties.

Checklist topic Configure NAP CA Properties

See Also

Community Additions