You need to ensure that all client computers in the domain keep the same time as an external time server
You need to install an enterprise subordinate certification authority (CA) that supports private key archival
You need to compact an Active Directory database on a domain controller that runs Windows Server 2008 R2