Implementing an Enterprise Root CA

Some organizations do not require the security enhancements of a multi-tier CA hierarchy. They simply need a CA to issue certificates for the computers, users, services, and network devices on their network. There is no need for redundancy or to provide a high-assurance trust model.

In these circumstances, a CA hierarchy consisting of a single CA can be deployed. An example of this is the CA hierarchy for Margie’s Travel shown previously in Figure 6-2.



It is always recommended to use Windows Server 2008 Enterprise Edition when installing an enterprise CA. Windows Server 2008 Enterprise Edition enables advanced ...

Get Windows Server® 2008 PKI and Certificate Security now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.