Mastering Active Directory

Types of certification authorities

There are two types of certification authorities:

• Private CAs: This is what we are covering in this chapter. This type of CA is mainly for the internal infrastructures, and it can be used to issue, manage, renew, and revoke certificates for internal objects and services. This will be a less of a cost to maintain. It is Active Directory integrated service, however if necessary AD CS components can also be installed in a workgroup environment (stand-alone CA). If objects in the external network likes to use certificates from the internal CA, the certificate must be first requested within the internal network; and once it's issued, it needs to export and import it into the external network along with the ...