Certificates and IPSec

I have domain controllers on either side of a firewall. I want to set up communication between them with IPSec so I can close up the firewall a bit. I have the IPSec filters set up, but I’m not sure how how to configure the Certificate Authority portion. Does anyone have instructions on this?

Thanks,
Scott