Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to install Enterprise CA in my windows server 2003.But I can select only stand alone root CA and the stand alone subordinate CA. Other two options are not highlighted. Can anybody give me the possible reasons for it? Thanks in advance.(I don't have much understanding of the concepts related to certificates.)

share|improve this question
up vote 1 down vote accepted

You need to be logged in with an account that is both an Enterprise admin, and in the Root domain's Domain Admins groups. You may want to login as the actual Administrator account for your domain, to do this, since it will be a member of the require groups. The process needs to make changes to the domain and forest, so it requires more privileges, then normally needed for day-to-day operations.

The machine should not be a Domain controller or have any other services installed.

You must have the computer name set to what it is going to be for the life of the CA. You cannot change the computer name without taking the CA offline.

Before doing anything you should take time to make sure the CA machine is extremely secure, apply all appropriate patches, and follow standard security hardening procedures.

share|improve this answer
Thanks. It's done. – ashok Nov 3 '11 at 2:58

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.