This article Explains about Setting up Microsoft Certification Authority (Active Directory Certificate Service). Microsoft CA can be installed on any Windows server or Domain Controller. Explanation on Active Directory Certificate Services – Technet Article
Detailed information and Step by Step guide is available in this Microsoft article
I have installed certificate service on my Domain Controller running on Windows Server 2012 R2. Here is the detailed step by step information
Installing Active Directory Certificate Services will promote Windows Server to a Certificate Authority :
- Click on “Server Manager” – click on “Manage” on top right corner of the page – “Add Roles and Features”
- Choose: “Active Directory Certificate Services”
- Click Next
- Select “Certification Authority”, “Certification Authority Web Enrollment”, “Online Responder”
- Click on Next
- You will be prompted to install Web Server Role (IIS) – Click Next
- Choose Install
While the installation is going through please add the administrator account you are using for CA to “IIS_IUSRS” group
- Once the installation is complete please click on the “Post-Deployment Configuration”
- Select the administrator account you added to IIS_IUSRS – Next
- Select “Certification Authority”, “Certification Authority Web Enrollment”, “Online Responder”, “Certificate Enrollment Policy Web Service”
- Choose “Enterprise CA”
- Select Create a new Private Key being a new setup we do not have a private key for encryption
- Select “SHA256” as the Algorithm – Next – Select validity for CA
- Select Next – follow the Wizard and leave the settings to default
- Choose “Choose and assign a certificate for SSL later” for server certificate – Click Next – Click Configure
- Open Certification authority or use localhost/certsrv to access CA or create certificates
Installation Guide Video
Click here for instructions to setup template for vSphere Certs