Deploying a Standalone Root CA in Windows Server 2012 R2

A CA is a well-designed and highly trusted service in an enterprise, which provides users and computers with certificates, maintains the CRLs, and optionally responds to OCSP requests. You can install a CA in your environment by deploying the AD CS role on Windows Server 2012 R2. When you install the first CA, it establishes the PKI in the network, and it provides the highest point in the entire structure. This is needed when we configure SCCM R2 to go over HTTPS.