|Configuring Active Directory Authentication / Managing Active Directory Certificates|
When you install Active Directory Certificate Services and create a root CA certificate for the Active Directory server, the certificate is automatically created at the root of the C:\ drive. For example: c:\ad2008.ad01.vocera.com_ad01.crt.
Use the certutil command-line utility.
Request the root CA certificate from the CA Web Enrollment Site.