Entrust PKI as a Service

Installing the default set of certificate templates

If they are not installed, install the default set of Microsoft certificate templates as described in the sections below.

 This section is mainly for new Microsoft Active Directory forest deployments, as they do not include a set of Microsoft certificate templates.

Enabling the Certificate Templates snap-in

You can enable the Certificate Templates snap-in by running the following PowerShell command.

Install-WindowsFeature RSAT-ADCS-mgmt

For example:

IMG

You can also enable the Certificate Templates snap-in using the Windows Server Manager wizard.

To enable the Certificate Templates snap-in with the Windows Server Manager:

  1. Open Microsoft Management Console (MMC) – for example, by pressing the Windows key on the keyboard and typing “mmc.exe” in the Windows search box.

    IMG

  2. On the top-right of the window, click Manage > Add Roles and Features.

  3. In the Select Features dialog, click Next until you reach the Features section.

    IMG

  4. Check the following box: Remote Server Administration Tools / Remote Administration Tools / Active Directory Certificate Services Tools.

  5. Click Next until the Install button appears, then click Install.

  6. Wait for the installation to complete before proceeding to the next step.

Installing the default set of Microsoft Certificate Templates using the snap-in

After Enabling the Certificate Templates snap-in, add the snap-in to install the default set of Microsoft Certificate Templates.

To install the default set of Microsoft Certificate Templates using the snap-in:

  1. Log in to the root domain of the Active Directory forest as a member of both the Enterprise Admins and Domain Admins groups.

     Users without these privileges cannot access the dialog options described in this section.

  2. Open Microsoft Management Console (MMC) – for example, by pressing the Windows key on the keyboard and typing “mmc.exe” in the Windows search box.

    IMG

  3. Select File > Add/Remove Snap-in.

  4. In the Available snap-ins column, select Certificate Templates.

    IMG

  5. Click Add to move the Certificate Templates snap-in to the Selected snap-ins column.

  6. Click OK to close the Add or Remove Snap-ins wizard and return to the Microsoft Management Console.

  7. In the Microsoft Management Console, click Certificate Templates under Console Root.

    IMG

  8. Click Yes in the confirmation dialog.

    IMG
     If you click No in the confirmation dialog, remove the Active Directory Certificate Services Tools and repeat all the steps in this section.