XADM: How to Install the Key Management Server

This article describes how to install Key Management server (KM server) on an Exchange 2000 Server computer.

Software Requirements

• Microsoft Windows 2000 Certificate Server
• Microsoft Exchange 2000 Server
• Microsoft Exchange Messaging and Collaboration Services
• Microsoft Exchange Key Management Services

How to Install and Configure the Certificate Server

1. On the Start menu, point to Settings, and then click Control Panel.
2. Double-click Add Remove Programs.
3. Click Add/Remove Windows Components.
4. In the Windows Component Wizard box, click to select the Certificate Services check box, and then click Next.
5. If you are running Terminal Server, click either Remote Administration Mode or Application Server Mode to choose the mode in which you want to install Certificate Server, and then click Next.
6. If this is the first installation of Certificate Server and no other certifying authority needs to act as the root, select Enterprise Root CA, and then click Next.NOTE: If a Certificate Server or another legacy Exchange Server computer exists in the organization, please see the online documentation for Exchange Server 5.5 KM server and Windows NT 4.0 Certificate Server interoperability and configuration.
   
   
7. In the CA Name box, type a certification authority (CA) name. This name cannot be changed or modified if this Certificate Server is the root. Click Next.
8. Choose the location in which you want the certificate database and log file to be created and reside. Stop the Microsoft Internet Information Service (IIS), and then click Next.
9. After installation finishes, click Finish.
10. On the Start menu, point to Programs, point to Administrative Tools, and then click Certification Authority.
11. Under Certification Authority (Local), click to expand KMS.
12. Right-click Policy Settings, point to New, and then click Certificate to Issue.
13. In the Select Certificate Template dialog box use the Control key to click and select the Enrollment Agent (Computer), the Exchange User, and the Exchange Signature Only items, and then click OK.

How to Install the Key Management Server

1. On the Start menu, point to Settings, and then click Control Panel.
2. Double-click Add Remove Programs.
3. Click Change or Remove Programs, and then click Microsoft Exchange 2000.
4. When the Exchange 2000 Server Installation Wizard is displayed, click Next.
5. If previous components have been installed, click Change under Action. If no components have been installed, click Install.
6. Under Action, click to select the Install check box for Microsoft Exchange Messaging and Collaboration Services and Microsoft Exchange Key Management Services. Click Next.
7. Choose to display the password once, and then either write the password down or have the password written to two floppy disks. Click Next.

This completes installation of your Key Management server.