O'Reilly logo

Windows Server® 2008 PKI and Certificate Security by Brian Komar

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Organizing Issuing CAs

The deployment model used for issuing CAs should be based on the following factors:

  • The number of certificates that will be issued. The more certificates a CA hierarchy issues to users, computers, services, or network devices, the higher the number of issuing CAs required in the CA hierarchy. The higher number of issuing CAs provides redundancy so that the failure of a single CA does not prevent deployment of certificates.

  • Availability requirements in a wide area network environment. In a wide area network (WAN) environment, there is a possibility of network outages. To mitigate the impact that a network outage would have on the ability of clients to communicate with a CA, CAs can be placed at major network hub sites. For ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required