I'm using https://technet.microsoft.com/en-us/library/cc770413(v=ws.10).aspx to set up OCSP on a Windows Server 2008 R2 Std. When I install Active Directory Certificate Services, can't find "OCSP" role service this check box.

Hi Jennyu,

Membership in Domain Admins or Enterprise Admins, or equivalent, is the minimum required to complete this procedure, deploying Online Responders should occur after deploying CAs and before deploying the end-entity certificates, more details please refer the following information:

Configure a CA to Support OCSP Responders

https://technet.microsoft.com/en-us/library/cc732526.aspx

 Implementing an OCSP responder: Part I - Introducing OCSP

http://blogs.technet.com/b/askds/archive/2009/06/24/implementing-an-ocsp-responder-part-i-introducing-ocsp.aspx

Set Up an Online Responder

https://technet.microsoft.com/en-us/library/Cc725937.aspx

The related third party article:

Installing and configuring a Microsoft Online Certificate Status Protocol (OCSP) Responder

http://www.vkernel.ro/blog/installing-and-configuring-a-microsoft-online-certificate-status-protocol-ocsp-responder

Im glad to be of help to you!

*** This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet. ***