To configure the Active Directory Domain Services (AD CS) certification authority (CA) service (CertSvc) to listen on a static DCOM port
- Log on with an account that has local administrator permission on the CA
- Open the Component Services snap-In (dcomcnfg.exe).
- In the left pane of the Component Services snap-In, expand Component Services, Computers, MyComputer, and then DCOM Config.
- In the right pane, select CertSrv Request.
- On the Action menu, click Properties.
- On the Endpoints tab, click Add.
- Select Use static endpoint, enter an unused TCP port number, for example, 4000, and then click OKtwice.
- Close the Component Services snap-In.
- Restart the certification authority service.
net stop certsvc
net start certsvc