Q: I want to install an enterprise certification authority (CA) on one of my Active Directory (AD) domain controllers (DCs), but it only lets me install a Standalone CA. Why?

Jan De Clercq

November 11, 2009

1 Min Read
ITPro Today logo

Q: I want to install an enterprise certification authority (CA) on one of my Active Directory (AD) domain controllers (DCs). Even though I'm logged on as a domain administrator, the option to install the CA as an Enterprise CA is greyed out in the installation wizard—it only lets me install a Standalone CA, as shown here. What's wrong here, and how can I resolve this?

Click to expand.

A: The problem is that you don't have sufficient privileges for writing the Enterprise CA configuration information in AD. To remedy your problem make sure that the account you use to install the Enterprise CA is a member of built-in Enterprise Admins group. For more information on the exact difference between Enterprise and Standalone CAs, see this Microsoft Technet article.

Related Reading:

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like