Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

Rich Megginson — Thu, 19 Jul 2012 02:52:28 GMT

The script works great if you are logged in. What I would like to do is install and setup the CA as part of an unattended install, as an Enterprise Root CA (setupca.vbs /IE). I cannot get this to work on 2008 R2. No matter in which pass I put it "specialize" (RunSynchronous) "oobeSystem" (FirstLogonCommands) or even in SetupComplete.cmd, I always get this error:

InstallAndVerifyCA: Error! Must be a domain administrator to create Enterprise CA

I know it needs AD to be up and running - I can setup AD unattended with dcpromo /unattend:file.ini - then a reboot is required - is there some way I can do the following during an unattended setup:

dcpromo /unattend:file.init

reboot

setupca.vbs /IE

????

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

Darren Bennett — Thu, 12 Jul 2012 08:48:10 GMT

Refer to technet.microsoft.com/.../ee918754(WS.10).aspx. This contains an updated version of the script as of June 19th, 2012

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

ChrisL — Fri, 01 Jun 2012 03:36:16 GMT

Which script do I use, this one or the one here: technet.microsoft.com/.../ee918754(WS.10).aspx

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

MS2065 [MSFT] — Fri, 09 Sep 2011 05:11:05 GMT

Unfortunately I am not aware of an automated SCEP installation script.

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

Mark Peragallo — Thu, 08 Sep 2011 13:38:50 GMT

How would one go about adding and configuring the Network Device Enrollment Service?

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

Andy Arismendi — Tue, 08 Mar 2011 02:26:09 GMT

Where are the cmdlets for this? Or more setup functionality in servermanagercmd?

With the VBS, is there a way to specify the length of certificate validity?

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

Dan — Fri, 11 Feb 2011 02:49:39 GMT

I agree with Patrick! Why aren't there CMDlets for this yet?

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

Patrick — Fri, 09 Jul 2010 07:40:05 GMT

Cool script, thank you for that.

I wonder if the same could not be achive using PowerShell.

for instance POSH is used to manage Exchange, AD and other servcies.

Is there a particular reason to use "old" vbScript rather than "new" POSH scripts?

Thank you for your feedback

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

Mika Seitsonen — Thu, 29 Apr 2010 04:14:43 GMT

See http://blogs.technet.com/mrsnrub/archive/2010/03/02/q-when-is-a-validity-period-not-a-validity-period.aspx for instructions on how to modify script in order to include this functionality.

re: Automated CA installs using VB script on Windows Server 2008 and 2008R2 [UPDATED]

core-jockey — Mon, 12 Apr 2010 01:44:36 GMT

I searched the better part of 2 days trying to find a way to configure cert services on R2 core.

Thanks for providing this script. It works very nicely.