Assume the following scenario:
- A certification authority is installed.
- An error occurred during installation that required a retry.
- The certification authority role was uninstalled and then the role configuration was tried again.
- The role configuration fails with the following error message:
The Certification Authority is already installed. If you are trying to reinstall the role service, you must first uninstall it.
Cause
Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the Application of regulationsto realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can downloaded via GitHub and can be used free of charge. Professional maintenance is also offered.
May occur if artifacts from the previous CA installation remain in the registry, for example, if the installation was done with a script and this script made configuration settings downstream.
First, make sure that the Certification Authority role is really uninstalled. This can be done with the following Windows PowerShell command.
Remove-WindowsFeature Adcs-Cert-Authority
Then the registry path for the certification authority must be deleted.
HKEY_LOCAL_MACHINE\CurrentControlSet\Services\CertSvc
English 
Deutsch