Construction of Windows Server 2016 Certificate Server (3)

After the Windows Server 2016 active Directory server is built, build the certificate server in the domain environment.

It is recommended that the certificate server be deployed separately (as a domain member server).

After initializing the server (computer name, IP address, firewall, plus domain, etc.).

Open the server manager and select add roles and features

Choose, next step

Choose, next step

Choose, next step

Select Active Directory Certificate Service

Select add function

Choose, next step

Choose, next step

Choose, next step

Select, add featur

Check, Certificate Authority and Certificate Authority Web enrollment, next step

Choose, next step

Choose, next step

Select, install

Choose to configure Active Directory Certificate Services on the target server

Choose, next step

Check Certification Authority and Certificate Authority Web enrollment. Next step

Select, Enterprise CA, next step

Select, root CA, next step

Choose, next step

Choose, next step

Choose, next step

Change the certificate to be valid for 50 years. Next step

Choose, next step

Select, configure

Select, close

Restart the certificate server

The certificate server deployment is complete.