CA cert present on NTAuth store

On any Windows server (for example RA), Install CA management tools: (Domain admin permissions are required for step 14 )

  1. Start Server manager

  2. Client Manage->Add Roles and Features

    image-20230323-172652.png


  3. Click Next on Welcome screen:

    image-20230323-172711.png
  4. Client Next on Select installation type:

    image-20230323-172743.png
  5. Client Next on Server selection:

    image-20230323-172836.png


  6. Client Next on Select Server roles (don’t add/remove anything).

    image-20230323-172900.png


  7. Select Certification Authority Management Tools and click Next button.

    image-20230323-172921.png


  8. Click “Install” button.

    image-20230323-172952.png


  9. Wait till component is installed and then close window:

    image-20230323-173012.png


  10. Hit Start menu and execute mmc.exe

    image-20230323-173040.png


  11. Go to File menu, option Add/Remove Snap-in…

    image-20230323-173104.png


  12. Select „Enterprise PKI“ on left panel and click „Add“ button. Than click „“ button.

    image-20230323-173123.png


  13. Make a right-click on Enterprise PKI and click “Manage AD containers”.

    image-20230323-173142.png


  14. Go to “NTAuthCertificates” tab. Verify issuing Ca certificate is present.

    image-20230323-173157.png