Previous Topic: Step 2. Install and Configure a Certificate Authority

Next Topic: Step 3a. Set Up on a Single Computer

Step 3. Set Up ADS, Certificate Authority, and CA Identity Manager

To establish trust of root certification authorities in post-Windows 2000 servers, you must use trusted root certification authority in group Policy to distribute your organization's root certificates. For more information, see the section "Policies to Establish Trust of Root Certification Authorities" on the TechNet library for Windows 2003 at the following URL:

http://technet.microsoft.com/en-us/library/cc775613(WS.10).aspx

For exact steps on how to add a trusted root certification authority to a Group Policy object, see the section "Trusted Root Certification Authority Policy" on the TechNet library for Windows 2008 at the following URL:

http://technet.microsoft.com/en-us/library/cc754841.aspx

You can set up ADS, the Certificate Authority, and CA Identity Manager on a single system or distributed across multiple computers.