On the Cryptography for CA page, keep the default settings for CSP ( RSA#Microsoft Software Key Storage Provider) and hash algorithm ( SHA2), and determine the best key character length for your deployment. On the Specify the type of the private key page, verify that Create a new private key is selected, and then click Next. On the Specify the type of the CA page, verify that Root CA is selected, and then click Next. On the Setup Type page, verify that Enterprise CA is selected, and then click Next. In Role Services, click Certification Authority, and then click Next. Read the credentials information and, if needed, provide the credentials for an account that is a member of the Enterprise Admins group. When installation is complete, click Configure Active Directory Certificate Services on the destination server. Do not close the wizard during the installation process. In Confirm installation selections, click Install.

In Active Directory Certificate Services, read the provided information, and then click Next. When you are prompted to add required features, click Add Features, and then click Next. In Select Server Roles, in Roles, select Active Directory Certificate Services. In Server Pool, ensure that the local computer is selected. In Select destination server, ensure that Select a server from the server pool is selected. In Select Installation Type, ensure that Role-Based or feature-based installation is selected, and then click Next.

The Before You Begin page of the Add Roles and Features Wizard is not displayed if you have previously selected Skip this page by default when the Add Roles and Features Wizard was run.

Instal the new for windows Sea Horizon