For EZCA to validate the local domain ownership, we have to install a local agent in your network. This web service will receive all ACME request and validate the domain ownership on behalf of EZCA. The first step is setting up IIS in a Windows machine.
In a domain joined PC open an Administrator PowerShell window and run the following command:
Install-WindowsFeature -name Web-Server -IncludeManagementTools
Once IIS is installed, download web-deploy from the official Microsoft site and open the installer.