Preparing the Active Directory forest for WSTEP

To prepare for WSTEP enrollment, perform the following operations in the domain controller of the Windows Active Directory forest's root domain.

• Creating a PKIaaS WSTEP Service Account

• Installing the default set of Microsoft Certificate Templates

• Downloading the certificate chain

• Setting up LDAPS on domain controllers