IPSEC between W2K domain member and W2K stand-alone



Dear All,

I have some doubts, would you please help me to explain:

a. Is it possible to configure IPSec communication between a W2K
Professional (domain member) and W2K Server (stand alone server, not
member of any domain).
b. If so, which certificate server can be used? Standalone root CA in
stand-alone W2K Server?

Many thanks

.