> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truu.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Create Enrollment Agent Certificate

1. Log onto the server you are deploying the **TruU CA Adapter** on, then launch the Microsoft Management Console (MMC) and click **File**, then **Add/Remove Snap-in**.

**Note**This step grants the TruU CA Adapter server the Signing Authority of the smartcards that get distributed to the workstations. The Enrollment Agent certificate is also called the "Signer Certificate".    

<img src="https://mintcdn.com/truu-2/E6hYbyLPrBHWbQ3m/images/docs/d5106dc897fe50b0c47e6e6326f6ac29b07224b35f950ae0e62b4919fad9298f-image.png?fit=max&auto=format&n=E6hYbyLPrBHWbQ3m&q=85&s=6ff11b78b9d10ab7b08f55f6235342b2" alt="" width="2836" height="1450" data-path="images/docs/d5106dc897fe50b0c47e6e6326f6ac29b07224b35f950ae0e62b4919fad9298f-image.png" />

2. In the "Add or Remove Snap-ins" list, choose **Certificates**, then click **Add**.

   <img src="https://mintcdn.com/truu-2/YlfY4z_3_-uDkBaP/images/docs/58054b8d6ad43c640dabffb0e14a23b2714e95f360aa9966a9a85aeb1550935a-image.png?fit=max&auto=format&n=YlfY4z_3_-uDkBaP&q=85&s=5166ed06bbda2bb73c046bc437a3c18b" alt="" width="1684" height="1188" data-path="images/docs/58054b8d6ad43c640dabffb0e14a23b2714e95f360aa9966a9a85aeb1550935a-image.png" />

3. Choose **‘Computer account’** for the snap-in to manage certificates for, then choose **‘Local computer’** for the computer you want the snap-in to manage. Click **‘Finish’** to complete.   

   <img src="https://mintcdn.com/truu-2/E6hYbyLPrBHWbQ3m/images/docs/d014b04edf739724dded2ce43e86f455da384bcc6f4580eb85865e4d5a333f74-image.png?fit=max&auto=format&n=E6hYbyLPrBHWbQ3m&q=85&s=626c8683bcc2a399e50f92ff70daa1d7" alt="" width="807" height="306" data-path="images/docs/d014b04edf739724dded2ce43e86f455da384bcc6f4580eb85865e4d5a333f74-image.png" />

4. Next, right-click on the **Personal** folder, then navigate to **All Tasks** and then the **Request New Certificate**.

   <img src="https://mintcdn.com/truu-2/qCK1oWL4jNpZKJ8A/images/docs/8e2aa364a8d4b63ca83e61f68b2802a84591606add560157a7adf7d7414cd1ed-image.png?fit=max&auto=format&n=qCK1oWL4jNpZKJ8A&q=85&s=fe1d137b83d185a4902e3884fcd97ebf" alt="" width="1615" height="1025" data-path="images/docs/8e2aa364a8d4b63ca83e61f68b2802a84591606add560157a7adf7d7414cd1ed-image.png" />

5. Click Next, Next, and Select the **TruUEnrollmentAgent(Computer)** template you created, then click **Enroll**. This will install the Signer Certificate into the local personal store of the CA Adapter server. You can close all windows.

<img src="https://mintcdn.com/truu-2/rjjBxA7Z_Wk_-34G/images/docs/e10b4934e18a64774be6bca7191ab06a7120edf20604388e5108c6ce046405a2-image.png?fit=max&auto=format&n=rjjBxA7Z_Wk_-34G&q=85&s=4d39c92299e266fb074e8ad7785bb0da" alt="" width="1557" height="1147" data-path="images/docs/e10b4934e18a64774be6bca7191ab06a7120edf20604388e5108c6ce046405a2-image.png" />

***

[Create the Smartcard Logon Template](/docs/create-the-smartcard-logon-template)

[Granting Service Account Permissions](/docs/granting-service-account-permissions)
