Mastering Active Directory - Second Edition

Issuing a certificate for the issuing CA

In order to get AD CS running on the issuing CA, it needs the certificate issued from the parent CA, which is the root CA we just deployed. During the role configuration process, it automatically creates the certificate request under C:\, and the exact filename will be listed in the command output from the previous command:

The file needs to be copied from the issuing CA to the root CA, then you need to execute the following command:

certreq -submit "REBEL-CA1.rebeladmin.com_REBELAdmin IssuingCA.req"

As I explained before, any request to the root CA will be processed manually, so this request will be ...