Installing a Self-Signed Certificate (Optional)

This topic applies only if you have not purchased and installed a certificate from valid certification authority (CA) (for example, VeriSign).

1. Choose Start>All Programs>Administrative Tools>Certification Authority.
2. Under Certification Authority (Local), expand the name of your CA.
3. Install a self-signed certificate, if you have been issued one.
   Contact your network administrator for the appropriate type of certificate to be installed.
4. To install a self-signed certificate if you have not been issued one, choose Start>All Programs>Administrative Tools>Certification Authority.
5. Right-click Certificate Templates and choose Manage.
6. Double-click Computer Template and select Security.
7. Choose Allow and check the Enroll for Permissions for Authenticated Users.
8. Click OK.
   Saves and closes Certificate Templates.
9. Choose Start>All Programs>Administrative Tools>Active Directory Users and Computers.
10. Right-click the appropriate domain name and choose Properties.
11. Select the Group Policy>Default Domain Policy, and choose Edit.
12. Double-click Computer Configuration>Windows Settings>Security Settings>Public Key Policies.
13. Right-click Automatic Certificate Request Settings, and choose New>Automatic Certificate Request.
14. Click Next.
15. Select Computer, click Next, and then click Finish.
16. Reboot the computer.
    A self-signed certificate is now installed and you can verify by repeating steps 1 to 3.