I want to test my software's SSO, so I am trying to configure ActiveDirectory on Windows Server 2012, following this tutorial.

At "prerequisites step", the window is supposed to look like:

enter image description here

but unfortunately I get an error:

enter image description here

Sorry for the Japanese, it says:

x The prerequisites check for the domain controller upgrade failed.
   The certificate server is installed.
i The prerequisites check is over.
x One of the above failed. Please correct and retry.

It seems that ActiveDirectory is already installed, but not configured.

Is there another way to enter the forest/domain name details, apart from this wizard?
Or should I uninstall ActiveDirectory, then restart the tutorial?


If you have already added the Active Directory Certificate Services before promoting it to a Domain Controller, remove the Certificate Services role, and then add the AD DS role again.

If the "Add Roles and Features" wizard does not allow you to remove Active Directory Certificate Services" (checkbox is greyed out), then you can remove it using the following PowerShell command:

Remove-WindowsFeature -Name AD-Certificate

See also: https://serverfault.com/a/717841/239616

  • Here is my understanding of your answer, is it correct? 1) Remove AD CS, 2) Promote to domain server, 3) Add AD CS – Nicolas Raoul Feb 26 '13 at 8:13
  • Exactly! Remove ADCS role, add ADDS role, add ADCS role again – Mathias R. Jessen Feb 26 '13 at 10:12

The removal of certificates worked in my case too for clearing off the pre-requisite failure. I'm pasting a powershell command in case the GUI does not work

PS C:\WINDOWS\system32> Remove-WindowsFeature -Name AD-Certificate

I really like the answer by Mathias R. Jessen.

Remove-WindowsFeature -Name AD-Certificate

as a PowerShell command; however, if the option Network Device Enrollment Service is already installed, so the above command will be not enough before uninstalling this feature:

PS C:\> Uninstall-AdcsNetworkDeviceEnrollmentService -Force

Now, retry Mathias's solution and would work now ;-)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.