Integration with CipherTrust Manager

To integrate Microsoft Active Directory Certificate Services with the CipherTrust Manager, you need to configure SafeNetProtectApp Key Storage Provider with AD CS. To do so:

1. Open Server Manager > Manage > Add Roles and Features.

2. On the Server Roles screen, select the Active Directory Certificate Services, and click Add Features on the popup that appears.

3. On the Features screen, click Next.

4. On the AD CS screen, click Next.

5. On the Role Services screen, enable the Certification Authority and Certification Authority Web Enrollment, and click Next.

6. On the Confirmation screen, click Install.

   Note

   For an enterprise CA, you need to be part of a domain or AD DS must be configured on the same.

   After installation completes, click the text highlighted in blue "Configure Active Directory Certificate Services on the destination server".

7. Click Next.

8. On the Role Services screen, enable Certification Authority and Certification Authority Web Enrollment. Click Next.

9. On the Setup Type screen, select Enterprise CA, and click Next.

10. On the CA Type screen, select Root CA, and click Next.

11. On the Private Key screen, select Create a new private key, and click Next.

12. From the Select a cryptographic provider drop-down, select SafenetProtectApp Key Storage Provider, and click Next.

    

13. Specify the CA name as per your requirement, and click Next.

14. Specify the CA validity period, and click Next.

    Note

    By default, the validity period of a root CA is 5 years.

15. On the Certificate Database screen, click Next.

16. On the Confirmation screen, click Configure.

    

This completes the integration of Microsoft Active Directory Certificate Services with the CipherTrust Manager.