Role summary by server:
- CA server — Certification Authority (already installed) + Web Server (IIS)
- OCSP server — Online Responder + Web Server (IIS)
1
Select Start > Windows Administrative Tools > Server Manager > Manage. Then
select Add roles and features. In the Before You Begin box, select [ Next > ].
2
Choose the installation type: Role-based or feature-based installation. Select
[ Next > ].
3
On the Server Selection page, select the local server. Select [ Next > ].
4
On the Server Roles page, check the boxes appropriate for the server you are
configuring:
- CA server: Web Server (IIS) (Active Directory Certificate Services is already installed).
- OCSP server: Active Directory Certificate Services and Web Server (IIS).
5
On the Features page, no additional features are required. Select [ Next > ].
6
OCSP server only. On the AD CS page, review the information provided. No action is
required. Select [ Next > ].
7
OCSP server only. On the Role Services page for AD CS, check Online Responder.
A pop-up window will appear asking if you would like to include management tools; the
defaults are sufficient.Select [ Next > ].
Do not check Certification Authority on the OCSP server. The CA role is only installed
on the CA server.
8
On the Web Server (IIS) page, review the information provided. No action is required.
Select [ Next > ].
9
On the Web Server (IIS) Role Services page, the defaults are sufficient. Select
[ Next > ].
10
On the Confirmation page, select [ Install ].
11
After installation completes, select [ Close ].

