> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truu.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure TruU CA Adapter with ADCS

The TruU CA Adapter enables TruU to automatically request, renew and revoke certificates from your Microsoft Certificate Authority, which are used for logging a user into their workstation. The TruU CA Adapter leverages your existing Active Directory Certificate Authority and Active Directory infrastructure. The detailed instructions for deploying a TruU CA Adapter are in the ensuing pages of this guide.

## Prerequisites

* Domain Joined Windows Server to install CA Adapter
* **Specs**:   
  * **Operating System**: Windows Server 2022
  * **Memory**: 8 GB RAM
  * **CPU**: 2 vCPUs
* Create a **service account** that will be used in various locations specifically for the application of the TruU product.

## Port Requirements

The TruU CA Adapter establishes a **persistent outbound HTTPS (443)** WebSocket connection to the TruU Cloud. This connection is used to validate OAuth tokens and securely communicate with the TruU Identity Platform. TruU CA Adapter also requires connectivity to the issuing CA over the DCOM/RPC protocol.

| Service        | Port(s)                                     | Source                 | Destination         | Description                                                                                            |
| -------------- | ------------------------------------------- | ---------------------- | ------------------- | ------------------------------------------------------------------------------------------------------ |
| **HTTPS**      | **443**                                     | TruU CA Adapter Server | TruU Cloud          | Secure communication and token validation between the CA Adapter and the TruU Identity Platform.       |
| **DCOM / RPC** | **Dynamic ports above 1023** + port **135** | TruU CA Adapter Server | Microsoft CA Server | Required for standard Microsoft CA / RPC/DCOM operations. The CA Adapter server must be domain-joined. |

For details on configuring firewall rules for Active Directory Certificate Services:

* [**https://docs.microsoft.com/en-us/archive/blogs/pki/firewall-rules-for-active-directory-certificate-services**](https://docs.microsoft.com/en-us/archive/blogs/pki/firewall-rules-for-active-directory-certificate-services)
* [**https://support.microsoft.com/kb/154596/en-us**](https://support.microsoft.com/kb/154596/en-us)

***

[Create Enrollment Agent Computer Template](/docs/create-the-computer-template)