Building a Subordinate Certification Authority server
We build Subordinate CAs not really for the purpose of redundancy, like with many other kinds of servers, but because there are specific tasks that you may want to perform on a subordinate CA rather than a root CA. If you issue a lot of certificates, or different kinds of certificates, you may want to differentiate between CA servers when issuing. Perhaps you want machine certificates that are used for IPsec to be issued from IPSEC-CA, but the SSL website certificates that you issue should show as being issued from WEB-CA. Rather than building out two independent Root CAs which both have top-level rights, you should consider creating a single Root CA, maybe called ROOT-CA, and placing these ...
Get Windows Server 2012 R2 Administrator Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
