Installing and Configuring Certificate Services

  • Article

To enable TESTSERVER to issue certificates and function as a CA, you first need to install Microsoft® Windows® 2000 Certificate Services. Microsoft Windows 2000 Certificate Services provide an integrated public key infrastructure (PKI) that enables a more secure exchange of information across a network. For more information about how to install Microsoft Windows 2000 Certificate Services and setting up a CA, see this Microsoft Web site.

Note   Before you begin installing Certificate Services, make sure that Internet Information Services (IIS) is installed on TESTSERVER.

To install and configure Certificate Services

  1. From Control Panel, choose Add/Remove Programs, and then choose Add/Remove Windows Components.

    The Windows Components Wizard appears.

  2. To install Microsoft Windows 2000 Certificate Services, select the Certificate Services component. When installing Certificate Services, you need to make the following choices:

    • You will be presented with the After installing Certificate Services, the computer cannot be renamed and the computer cannot join or be removed from a domain. Do you want to continue? message. To continue the Windows Components Wizard, choose Yes.
    • Select Enterprise root CA as the CA type.
    • In the CA Identifying Information dialog box, type the name for the certificate, and fill in the identifying information for your CA. For example, you can type Testserver CA as the name of the CA.
    • Leave the default locations of the certificate database, of the configuration information, and where the Certificate Revocation List (CRL) is stored.
    • If IIS is running, a message prompts you to stop the service. To stop IIS, choose OK.

  3. To verify that you have successfully configured your server as a CA with Web enrollment support, launch the Web browser on TESTSERVER and type the following address in the address bar:

    http://<Server Name>/certsrv

    For example, because TESTSERVER is the name of your domain controller, type the following in the address bar:

    http://TESTSERVER/certsrv

    For more information about Certificate Services Web pages, search for the "Using Windows 2000 Certificate Services Web pages" technical article on this Microsoft Web site.

    Note   Unlike Windows desktop-based wireless clients, Windows CE does not support automatic certificate allocation.

See Also

Certificate Infrastructure for a Wireless Network | How to Set Up an 802.1x Network and Connect to It with a CEPC

Last updated on Wednesday, April 13, 2005

© 2005 Microsoft Corporation. All rights reserved.