Deploying a Standalone Root CA 1. In the Server Manager console, click Add roles and features, then click "next" 3 times. 2. Tick the "Certificate Services" check box.