The Certificate Enrollment Policy Web Service is installed as an application in Microsoft Internet Information Services (IIS). Microsoft IIS requires a TLS certificate so that the Certificate Enrollment Policy Web Service can accept WSTEP enrollment requests over HTTPS.

The following topics describe how to issue a TLS certificate for Microsoft IIS.

• Creating a CSR for the Web server certificate
• Issuing the Web server certificate with an on-premises CA
• Issuing the Web server certificate with Entrust PKI as a Service
• Installing the Web server certificate into Microsoft IIS
• Updating Microsoft IIS to use the Web server certificate
• Installing the CA certificate chain for the Web server certificate