After the Ad Server deployment is complete, install a server to join the existing domain, deploy the CA server, and initialize the server before adding the domain: computer name, IP address, firewall, Windows patch.
1. Open Server Manager on a domain member server, select Add Roles and Features
2. Next step
3. Next step
4. Next step
5. Select Active Directory Certificate Services, add features
6. Add complete
7. Next Step
8. Next Step
9. Add the Certification authority Web enrollment, select Add Features
10. Add complete, Next
11. Next Step
12. Next Step
13. Wait for the installation to complete
14. Select Configure Active Directory Certificate Services on the destination server
15. Next Step
16. Select a certification authority, certification authority Web enrollment
17. Next Step
18. Next Step
19. Next Step
20. Next Step
21. Next Step
22. Change the root certificate usage time, next
23. Next Step
24. Configuration
25. Configuration Complete
After the CA server deployment is complete, the individual recommends that the CA server be restarted after the deployment is complete.
Windows Server R2 CA Server Deployment