How to Install and Configure Active Directory Certificate Services, Windows Server 2025 (AD CS)
In this tutorial, we walk through the installation and configuration of Active Directory Certificate Services (AD CS) on Windows Server and set up an enterprise Certification Authority (CA). We’ll cover certificate templates, enrollments, and GPO settings in later videos.
Applies to:
✅ Windows Server 2025, ✅ Windows Server 2022, ✅ Windows Server 2019, ✅ Windows Server 2016, ✅ Windows Server 2012R2, ✅ Windows Server 2012
Chapters:
0:00 Introduction
0:45 Requirements and Caveats
1:51 Install AD CS Role
2:59 Configure AD CS Role
4:40 Verification AD CS Role Configuration
7:03 Next Steps: Templates and Enrollment
7:20 Thank you for watching
Glossary:
AAD = Azure Active Directory
ADCS = Active Directory Certificate Services
ADDS = Active Directory Domain Services
AIA = Authority Information Access
CA = Certificate Authority
CDP = CRL Distribution Point
CRL = Certificate Revocation List
CSR = Certificate Signing Request
ed25519 = Edwards-curve Digital Signature Algorithm
GPO = Group Policy Object
IP = Internet Protocol
LDAP = Lightweight Directory Access Protocol
MMC = Microsoft Management Console
OCSP = Online Certificate Status Protocol
PKI = Public Key Infrastructure
RSA = (Rivest-Shamir-Adleman)
SHA = Secure Hash Algorithm
SPN = Service Principal Name
TCP = Transmission Control Protocol
UPN = User Principal Name
GitHub (commands):
https://github.com/DariensTips
Commands:
Add-WindowsFeature -ComputerName [computername] -Name ADCS-Cert-Authority -IncludeManagementTools
$params = @{
CAType = "EnterpriseRootCA"
CryptoProviderName = "RSA#Microsoft Software Key Storage Provider"
KeyLength = "4096"
HashAlgorithmName = "SHA256"
ValidityPeriod = "Years"
ValidityPeriodUnits = "5"
DatabaseDirectory = "[drive]:\[path]\[folder]"
LogDirectory = "[drive]:\[path]\[folder]"
}
Install-AdcsCertificationAuthority @params
Links:
https://learn.microsoft.com/en-us/pow...
https://learn.microsoft.com/en-us/pre...
https://learn.microsoft.com/en-us/tra...
https://learn.microsoft.com/en-us/tra...
https://learn.microsoft.com/en-us/tro...
https://learn.microsoft.com/en-us/win...
https://learn.microsoft.com/en-us/win...
Hashtags:
#ADCS #WindowsServer #CertificateServices #ActiveDirectory #PKI
