HID Crescendo Integration - Manual (Page 10)

Crescendo Integration Guide 47A3-905, A.1
Microsoft Windows Server 2003
Page 10 of 54 © 2008 HID Global Corporation. All rights reserved December 1, 2008
Upon clicking 6. next, the Windows Components Wizard inquires about the Certification Authority settings:
Figure 6: Windows components Wizard: cA Type
The Enterprise root CA is the most trusted CA in an enterprise and should be installed before any other
CA. If this option is not available, you may not have installed or properly configured Active Directory, as this
Certification Authority type requires Active Directory.
note: Do not check: ‘Use custom settings to generate the key pair and CA certificate’. Although you may be
able to select a smart card CSP in these settings, it is not possible to generate key pair and CA certificate on
a smart card. This is functionality that smart card CSPs do not support.
Select  Enterprise root cA and click next to continue
Note: Typically, you should install an enterprise CA if you will be issuing certificates to users or computers
inside an organization that is part of a Windows 2003 domain. An enterprise CA requires that all users
requesting certificates have an entry in the Windows 2003 Server Active Directory services. An enterprise
CA can issue certificates that are used to log on to a Windows 2003-based domain, and a stand-alone CA
cannot.