Active Directory Certificate Services (Public Key Services) not visible.
When you install an enterprise certification authority (CA), you must be logged on as a user who is a member of the Enterprise Admins group. This is because certificate templates, along with other required public key infrastructure (PKI) elements, are installed in Active Directory® Domain Services (AD DS) in the Configuration naming context. The following figure shows the specific containers installed in AD DS.