Installing And Configuring Certificate Services On Windows Server 2008 Part III

An Enterprise Root CA is required before you can install a subordinate CA. Once you have completed the steps described in the previous section, you can install one or more Enterprise Subordinate CAs. This type of CA exists under the Enterprise Root CA in a certificate authority hierarchy. Enterprise Subordinate CAs can be created to issue specific types of certificates.

Installing a Subordinate Enterprise CA

The process is slightly different for installing an Enterprise Subordinate CA.

To install an enterprise subordinate CA:

1. Open Server Manager, click Add Roles, and click Next.
2. Click Active Directory Certificate Services and click Next two times.
3. On the Select Role Services page, click Certification Authority, and then click Next.
4. On the Specify Setup Type page, click Enterprise, and then click Next.
5. On the Specify CA Type page, click Subordinate CA, and then click Next.
6. On the Set Up Private Key page, click Create a new private key, and then click Next.
7. On the Configure Cryptography page, select a cryptographic service provider, key length, and hash algorithm. Click Next.
8. On the Request Certificate page, browse to locate the root CA, or if the root CA is not connected to the network, save the certificate request to a file so that it can be processed later. Click Next.
9. On the Configure CA Name page, create a unique name to identify the CA. Click Next.
10. On the Set Validity Period page, specify the number of years or months that the CA certificate will be valid. Click Next.
11. On the Configure Certificate Database page, accept the default locations or specify a custom location for the certificate database and certificate database log. Click Next.
12. On the Confirm Installation Options page, review all of the configuration settings that you have selected. If you want to accept all of these options, click Install and wait until the setup process has finished.