Certificate services is a component on Microsoft Windows Server that is necessary for integrating when using a customer hosted Active Directory or RADIUS/802.1x server. Installing certificate services enables you to deploy a root certificate authority which can then be used to issue certificates that encrypt data such as authentication credentials. This guide takes you through how to deploy a Stand-alone root CA which is different than an Enterprise CA in that there is no ability to create templates or configure auto-enrollment.
The CA role can be installed from the Server Manager by clicking on 'Add Roles': Start > Administrative Tools > Server Manager > Roles
The Add Roles Wizard will appear:
Click Next > to bring up the server role selection. Choose Active Directory Certificate Services, followed by clicking next.
Select Certification Authority, and click Next.
Specify a standalone CA (if the server is not joined to a domain you will only have the option for a standalone CA):
Choose the CA name. In this example 'Standalone_CA' was used. Change this value to something that makes matches your environment's naming convention.
Confirm the CA settings that were configured. If all settings are correct click the 'Install' button.
Your server should now be acting as a standalone CA. Please reference this knowledge base article for Server 2003 configuration.