Note: Before you begin, make sure that Internet Information Services (IIS) Manager is installed.
From IIS Manager, expand the CA, and then expand Sites.
Right‑click Default Web Site, and then click Add Virtual Directory.
In the Alias field, type CertEnroll.
In the Physical path field, type C:\Windows\System32\CertSrv\CertEnroll.
Click OK.
Right‑click CertEnroll, and then click Edit Permissions.
From the Security tab, remove any write access except for the system.
Click OK.