Installing a second AD controller in a windows 2008 R2 Domain - Ceriticate Authority Install is not an option


  • I am installing a second domain Controller in a Windows 2008 R2 Domain and I am prompted to select Role Services where the options are:

    Certificate Authority                                   Checked By default

    Certificate Authority Web Enrollment

    Certificate Enrollment Web Service

    Certificate Enrollment Policy Web Service

    I can not continue unless the Certificate Authority is checked.  On the Pervious screen, Things to Note: The name and domain settings on this computer cannot be changed after a certificate authority (CA) has been installed.  If you want to change the computer name, join a domain, or promote this server to a domain controller, complete these changes before installing CA.

    I am promoting this server top a domain controller, but I can not uncheck this option to install later. 

    Can some give some guidance on whether I am misunderstanding the statement, and If I can install Both at the same time.Thanks,


    Friday, April 7, 2017 6:17 PM


All replies