O'Reilly logo

Windows Server® 2008 PKI and Certificate Security by Brian Komar

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Implementing a Three-Tier CA Hierarchy

The following sections detail the implementation of a three-tier CA hierarchy.

Implementing an Offline Root CA

If you are implementing a multi-tier CA hierarchy, you should implement an offline root CA, which requires that Certificate Services be installed as a standalone root CA. This allows the computer to remain as a workgroup member so that the computer can be removed from the network for long periods of time.

Note

Note

You can use Windows Server 2008 Standard Edition for all offline CAs. Only online CAs can fully take advantage of the benefits of the features available in Windows Server 2008 Enterprise Edition. ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required