![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Log in to the CEP server using CEPAdmin user name, and then launch PowerShell in administrative mode.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Run the command Import-Module ServerManager.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Run the command Add-WindowsFeature Adcs-Enroll-Web-Pol.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Run the command Install-AdcsEnrollmentPolicyWebService -AuthenticationType Certificate -SSLCertThumbprint “sslCertThumbPrint”.
Note: Replace <sslCertThumbPrint> with the thumbprint of the SSL certificate created for the CEP server, after deleting the spaces between the thumbprint values.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Complete the installation by selecting either Y or A.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Launch the IIS Manager Console.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the Connections pane, expand the web server that is hosting CEP.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Expand Sites, expand Default Web Site, and then click the appropriate installation virtual application name ADPolicyProvider_CEP_Certificate.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the virtual application called Home , double-click the application settings, and then double‑click FriendlyName.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Type a name under Value and close the dialog.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Double‑click URI, and then copy Value.
Notes:
- If you want to configure another authentication method on the same CEP server, then you must change the ID.
- This URL is used in MVE or any client application.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the left pane, click Application Pools.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Select WSEnrollmentPolicyServer, and then from the right pane, click Actions > Advanced Settings.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Select the identity field under Process Model.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the Application Pool Identity dialog box, select the custom account, and then type CEPSvc as the domain user name.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Close all dialog boxes, and then recycle IIS from the right pane of the IIS Manager Console.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From PowerShell, type iisreset to restart IIS.