Re: Enterprise CA placement
- From: "Peter Foldes" <okf22@xxxxxxxxxxx>
- Date: Fri, 26 Jun 2009 12:48:01 -0400
Please post this over to the windows.server.security newsgroup where it belongs
On the web:
http://www.microsoft.com/communities/newsgroups/list/en-us/default.aspx?dg=microsoft.public.windows.server.security
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"study" <study@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:42613931-79CE-43A0-95F7-5FC0F675DDB2@xxxxxxxxxxxxxxxx
Hello
We currently have a single 2003 active directory forest with one root empty
domain and 2 child domains.
We are going to create an offline standalone root CA (on a workgroup server)
then one issuing Enterprise CA (on a DC).
My question is,
1. which domain should we install the Enterprise CA on?
The issuing CA would be servicing all 3 domains. Can we install on one of
the child domain DCs or does it need to be on the root domain DC?
2. if we install 2 issuing CAs by installing CA on 2 different DCs, does it
provide redundancy in case one fails?
.
- References:
- Enterprise CA placement
- From: study
- Enterprise CA placement
- Prev by Date: Enterprise CA placement
- Next by Date: Re: Changing Creater Owner default permissions
- Previous by thread: Enterprise CA placement
- Index(es):
Relevant Pages
|