1- 1-DC windows server 2-1-member server 3-install ADCS in both machines 4-member server will be ROOT CA 5- DC will the responder 6-export CA and then import in the other machine 7- do request for CA then issue it 8-use certificate templates to create certificates for the following: 1- a user,2-a computer,3- a web site 9-Create online certificate request 10-Configure certificate auto enrollment for users accounts