Configure Certificate Enrollment Services

Click the new task shown in the Server Manager notifications: Configure Active Directory Certificate Services on the destination server.

In the credentials panel shown, click Change.

Enter an account that belongs to the Domain/Enterprise Admin group, click OK and then click Next.

Select Certificate Enrollment Web Service and Certificate Enrollment Policy Web Service and click Next.

Select the CA Name.

Click Select and select the Microsoft CA that will be issuing the certificates using certificate enrollment web service, click OK and then click Next.

For CES authentication type, select Windows Integrated Authentication and then click Next.

For CES service account, select Specify service account and then click Select.

Specify the service account <waep-service> and credentials and ensure to use the single service account created if using a single service account.

Click OK and then click Next.

For CEP authentication type, select Windows Integrated Authentication and then click Next.

For Certificate authentication, select Choose and assign a certificate for SSL later and click Next.

Review the confirmation page and click Configure.

When the installation completes, click Close.