> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Install IIS, AD CS, and Online Responder roles

> Instructions for installing the required roles and features on the CA server and OCSP server.

Instructions for installing the required roles and features on the CA server and OCSP server.

Perform the following on each server as indicated. Steps that apply to both servers are
performed on each machine independently.

<Note>
  **Role summary by server:**

  * **CA server** — Certification Authority (already installed) **+** Web Server (IIS)
  * **OCSP server** — Online Responder **+** Web Server (IIS)

  The Online Responder role service is **not** installed on the CA server, and the
  Certification Authority role service is **not** installed on the OCSP server.
</Note>

<Steps>
  <Step>
    Select **Start** > **Windows Administrative Tools** > **Server Manager** > **Manage**. Then
    select **Add roles and features**. In the **Before You Begin** box, select **\[ Next > ]**.
  </Step>

  <Step>
    Choose the installation type: **Role-based or feature-based installation**. Select
    **\[ Next > ]**.
  </Step>

  <Step>
    On the **Server Selection** page, select the local server. Select **\[ Next > ]**.
  </Step>

  <Step>
    On the **Server Roles** page, check the boxes appropriate for the server you are
    configuring:

    * **CA server:** **Web Server (IIS)** (Active Directory Certificate Services is already
      installed).
    * **OCSP server:** **Active Directory Certificate Services** and **Web Server (IIS)**.

    A pop-up window will appear asking if you would like to include management tools. By
    default, management tools are included; deselect if you do not want them.

    Select **\[ Next > ]**.
  </Step>

  <Step>
    On the **Features** page, no additional features are required. Select **\[ Next > ]**.
  </Step>

  <Step>
    **OCSP server only.** On the **AD CS** page, review the information provided. No action is
    required. Select **\[ Next > ]**.
  </Step>

  <Step>
    **OCSP server only.** On the **Role Services** page for AD CS, check **Online Responder**.
    A pop-up window will appear asking if you would like to include management tools; the
    defaults are sufficient.

    <Note>
      Do not check **Certification Authority** on the OCSP server. The CA role is only installed
      on the CA server.
    </Note>

    Select **\[ Next > ]**.
  </Step>

  <Step>
    On the **Web Server (IIS)** page, review the information provided. No action is required.
    Select **\[ Next > ]**.
  </Step>

  <Step>
    On the **Web Server (IIS) Role Services** page, the defaults are sufficient. Select
    **\[ Next > ]**.
  </Step>

  <Step>
    On the **Confirmation** page, select **\[ Install ]**.
  </Step>

  <Step>
    After installation completes, select **\[ Close ]**.
  </Step>
</Steps>