Import the CA certificates into Windows Trusted CA Store

Import into the Windows Trusted CA Store the CA certificate from the CA that signed the Active Directory server certificate.

Procedure 

1. On the system application server, open the Microsoft Management Console (MMC):

   1. Click Start > Run, and then enter mmc.

   2. Click OK.

2. Open the Certificates snap-in:

   1. Click File > Add/Remove Snap-in.

   2. Click Certificates and then click Add.

   3. Select Computer Account, and then click Next.

      Adhering to this step is very important, you must select 'Computer Account'.

   4. Select Local Computer, and then click Finish.

   5. Close the Add Standalone Snap-in window, and then click OK in the Add/Remove Snap-in window.

   6. Expand the Certificates section by clicking the plus (+) sign to show the Certificates tree.

3. Import the Root CA:

   1. Right-click Trusted Root Certification Authorities, select All Tasks, then select Import.

   2. Click Next.

   3. Locate the root CA, and then click Next.

   4. When the wizard completes, click Finish.