Requesting the Root CA Certificate from the Web Enrollment Site

You can request the root CA certificate for the Active Directory server by going to the CA web enrollment site for the server.

To request the root CA certificate from the web enrollment site:

  1. Open a browser, and log into Root Certification Authority Web Enrollment Site for the Active Directory server. It is usually available at one of the following links:




    • ip_address is the root CA server IP address

    • fqdn is the fully-qualified domain name of the root CA server

  2. Click the Download a CA certificate, certificate chain, or CRL link.
  3. Click Download CA certificate.
  4. Save the file certnew.cer to a local drive.