To prepare for WSTEP enrollment, perform the following operations in the domain controller of the Windows Active Directory forest's root domain.

• Creating a PKIaaS WSTEP Service Account
• Installing the default set of Microsoft Certificate Templates
• Downloading the certificate chain
• Setting up LDAPS on domain controllers