Root CA --> Sub CA

From: Hans Walder (hans.walder_at_pointag.net)
Date: 05/05/03


Date: Mon, 5 May 2003 08:09:14 -0700


Hello!

We want to use MS Windows 2003 Server soon. Can you tell
me the right newsgroup for CA questions?

We are going to generate one stand-alone root CA which is
used to give a subordinate CA the rights to enroll smart
cards on behave of an other user.

After the subordninate CA has got the rights we take the
root CA offline (for security reasons).

So, what is now if the root CA crashes once and we would
need to change the subordinate CA?

Of course, we make a backup of the servers but what will
happen in case the root server is not available any more,
if we have to change the subordinate CA?

Or is it possible to install a new root CA and all the
other subordinate roots can use it or do we then also
have to install all subordinate CAs again?

What important files to we have to save from the root CA
that we don't have to do all the work described before?

Thank you,
Hans



Relevant Pages

  • Re: Which certificate do I have to deploy ? Root CA or Subordinate CA certificate ?
    ... I have understood too that if I install the Root CA cert, I will trust ... every subordinate CA even if I dont have their certificates installed. ... But my question is "why does Microsoft recommend to install the root CA ...
    (microsoft.public.windows.server.security)
  • Re: Another Newbie Troubles with Debian
    ... make multiple selections...for example if I wanted to install the Web Server, ... DNS Server, FTP Server along with the desktop. ... If so type 'su' followed by the root password and then run ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • Re: Cannot Telnet to Solaris 5.7 server
    ... In order to install this oftware the user had to clear some ... I was attempting to login as root on the grpahical screen, ... below the screen went black then flashed back to the login screen. ... This is on a Solaris 5.7 server and I noticed that there is no Bin ...
    (comp.unix.solaris)
  • Re: Standalone Subordinate Certificate Server Problems
    ... the first time that i try to install the certificate from the root (on the ... child) i get the message "The format of the specified computer name is ... the root CA is also updated with all the necessary patches. ... other server can install ...
    (microsoft.public.win2000.security)
  • Re: boot net -> 38e00 boot: lookup .../Solaris_10/Tools/Boot failed
    ... boot net -v - install ... that it finds the correct server. ... can NFS mount the root directory just fine. ...
    (comp.unix.solaris)