Installing a Certificate Authority Hierarchy

Note Certificate Authority hierarchies are not supported in this release of Certificate Server.

Complete these steps to install a Certificate Hierarchy

1. During Certificate Server setup, you must select the Non-Root CA option was selected in the Choose Certificate Authority Hierarchy step of the Configuration Wizard to create a request file for obtaining a Certificate Authority (CA) signature certificate. If this was not done you will need to reinstall Certificate Server with this option selected. For more information about creating the request file, see the Choose Key Storage Location step of the Configuration Wizard in Installing Certificate Server.
   
   
2. Use the request file to obtain a signed CA certificate. The CA certificate must have a .crt extension and the same basename as the request file.
   
   
3. Store the CA certificate in the Shared Folder location.
   
   
4. Run the CertHier utility by clicking on Start, Programs, Windows NT 4.0 Option Pack, and Microsoft Certificate Server. Then click the "Certificate Server Hierarchy Configuration" shortcut.

Alternatively, CertHier can be run by starting a Command Prompt window or clicking on Start and Run in the Windows NT Taskbar and entering the command. CertHier has no command parameters.

Upon successful configuration of the CA hierarchy, Certificate Server setup is complete and the following message is displayed: