I cant understand how generate my own internal OIDs before install any CA? Please help meRene Anton

Once you have obtained your own OID arc you need to manually generate OID tree. There are no specific rules (the only is that oll OIDs must be within your arc). For example you may check the following document: http://support.microsoft.com/kb/287547http://en-us.sysadmins.lv

One way is to register OID from IANA. http://pen.iana.org/pen/PenApplication.page Also I suggest you check Brian Komar's response to similar question here http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/d416e57f-5537-43d6-ae96-8f9271a60229 .