1. Log on to LYNCLAB1DC, as LYNCLAB1\Administrator.(我们这里是lync\administrator)
  2. Go to Start, click Administrative Tools, and then click Server Manager.
  3. In console tree of Server Manager, right-click on Roles, and then click Add Roles.
  4. On the Before you Begin page, click Next.p_w_picpath
  5. On the Select Server Roles page, select Active Directory Certificate Services, and then click Next.

    clip_p_w_picpath001[4]

  6. On the Introduction to Active Directory Certificate Services page, click Next.

    clip_p_w_picpath002[4]

  7. On the Select Role Services page, ensure Certification Authority is selected, and then click Next.

    clip_p_w_picpath003[4]

  8. On the Specify Setup Type page, ensure Enterprise is selected, and then click Next.

    clip_p_w_picpath004[4]

  9. On the Specify CA Type page, ensure Root CA is selected, and then click Next.

    clip_p_w_picpath005[4]

  10. On the Set Up Private Key page, ensure Create a new private key is selected, and then click Next.

    clip_p_w_picpath006[4]

  11. On the Configure Cryptography for CA page, accept the defaults, and then click Next.

    clip_p_w_picpath007[4]

  12. On the Configure CA Name page, accept the defaults, and then click Next.
  13. On the Set Validity Period page, accept the defaults, and then click Next.
  14. On the Configure Certificate Database page, accept the defaults, and then click Next.
  15. On the Confirm Installation Selections page, click Install.

    iclip_p_w_picpath008[4]

  16. Once the installation is complete, click Close.