I have 4 DCs running Win2012 R2 and workstations 8.1 Pro. I need to implement EFS on a folder for File Server running Win2012. I noticed that my DCs are not running Active Directory Certificate Services. Do I need to install this first before implementation? if so this must run on all DCs? Please advise.