Cooking up an Enterprise root Certification Authority @ Windows 2012 R2

Let’s get some things sorted out and some facts in place, straight way :)


What this space is not about

- Installing Windows 2012 R2 server
- Setting up Active Directory on the server
- Setting up a Subordinate CA


WTF !! Then what are we here for

- We will be setting up an Enterprise Root CA on a Windows 2012 R2 server which has already been configured with AD(Active Directory) DS(Domain Services), since an Enterprise CA is integrated with DS
- We’ll also enable the Web Enrollment for the Certification Authority so that submitting a CSR and getting it signed is made easy
- You will also find how to increase the validity of the certificates
- And how to create more certificate templates and get those under the Web Enrollment

Put that wretched CA to some use


Hola Amigos !!


So you are all sweaty after the hard work of setting up a root CA on your Windows 2012 R2 server ?


Well, pull up and let's get some juice out of that damn server :)


Here is the itinerary of our joyous ride ahead



  • We’ll learn how to generate a Certificate Signing Request(CSR) both on a windows and linux server
  • We’ll get the CSR signed by the CA
  • Download both the CA public cert and the signed Server cert. Install the certs on our dear client