![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Log in to the CES server using CESAdmin as user name, and then launch PowerShell in administrative mode.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Run the command Import-Module ServerManager.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Run the command Add-WindowsFeature Adcs-Enroll-Web-Svc.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Run the command Install-AdcsEnrollmentWebService -ApplicationPoolIdentity -CAConfig "CA1.contoso.com\contoso-CA1-CA" -SSLCertThumbprint "sslCertThumbPrint" -AuthenticationType Kerberos.
Notes:
- Replace <sslCertThumbPrint> with the thumbprint of the SSL certificate created for the CES server, after deleting the spaces between the thumbprint values.
- Replace CA1.contoso.com with your CA computer name.
- Replace contoso-CA1-CA with your CA common name.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Complete the installation by selecting either Y or A.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Launch the IIS Manager Console.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the Connections pane, expand the web server that is hosting CES.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Expand Sites, expand Default Web Site, and then click the appropriate installation virtual application name: contoso-CA1-CA _CES_Kerberos.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the left pane, click Application Pools.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Select WSEnrollmentServer, and then from the right pane, click Actions > Advanced Settings .
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Select the identity field under Process Model.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the Application Pool Identity dialog, select the custom account, and then type CESSvc as the domain user name.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Close all dialogs, and then recycle IIS from the right pane of IIS Manager Console.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From PowerShell, type iisreset to restart IIS.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
For CESSvc domain users, enable delegation. For more information, see Enabling delegation.