![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the server, log in as an SCEPAdmin domain user.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From Server Manager, click Manage > Add Roles and Feature.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Click Server Roles, select Active Directory Certificate Services and all its features, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the AD CS Role Services section, clear Certification Authority.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Select Network Device Enrollment Service and all its features, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Web Server Role (IIS) Role Services section, retain the default settings.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
After installation, click Configure Active Directory Certificate Services on the destination server.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Role Services section, select Network Device Enrollment Service, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Select the SCEPSvc service account.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the CA for NDES section, select either CA name or Computer name, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the RA Information section, specify the information, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Cryptography for NDES section, do the following:
- Select the appropriate signature and encryption key providers.
- From the Key length menu, select the same key length as the CA server.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Complete the installation.
You can now access the NDES server from a web browser as an SCEPSvc user. From the NDES server, you can view the CA certificate thumbprint, the enrollment challenge password, and the validity period of the challenge password.