Mastering Active Directory - Second Edition

Types of certification authorities

There are two types of certification authorities:

• Private CAs: This is what we are covering in this chapter. This type of CA is mainly for internal infrastructures, and it can be used to issue, manage, renew, and revoke certificates for internal objects and services. It doesn't cost anything to issue certificates. AD CS is usually installed in an AD environment. However, if necessary, AD CS components can also be installed in a workgroup environment (a standalone CA). If objects in the external network still want to use certificates from the internal CA, the certificate must first be requested within the internal network, and once it's issued, it needs to export and import the certificate into the external ...