![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From Server Manager, click Manage > Add Roles and Feature.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Click Server Roles, select Active Directory Certificate Services and all its features, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the AD CS Role Services section, select Certification Authority, and then click Next > Install.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
After installation, click Configure Active Directory Certificate Services on the destination server.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Role Services section, select Certification Authority > Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Setup Type section, select Standalone CA, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the CA Type section, select Root CA, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Select Create a new private key, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Select a cryptographer provider menu, select RSA#Microsoft Software Key Storage Provider.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Key length menu, select 4096.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the hash algorithm list, select SHA512, and then click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the Common name for this CA field, type the hosting server name.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the Distinguished name suffix field, type the domain component.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Click Next.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Specify the validity period, and then click Next.
Note: Generally, the validity period is 10 years.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Do not change anything in the database locations window.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Complete the installation.