|
Posted by Brian Komar on January 14, 2008, 5:36 pm
Please log in for more thread options
You need to deploy separate enteprise CAs in each forest. An enterprise CA
cannot issue certificates to clients that are not in the same forest.
So you could deploy a common root CA with two subordinate enterprise CAs
(one in domainA and one in DomainB). They share a common root CA, so
certificates are trusted between the two forests.
Brian
> Hi,
>
> Does anyone know if it's possible to implement a PKI infrastructure in
> multiple forrests, where only one way trusts is configured.
>
> Scenario:
> PKI implemented in forrest A, domain A - certificates needs to be
> en-rooled on clients in forrest B, domain B.
> forrest trust created between forrest A and B.
>
> I hope that someone is able to help me.
>
> Thanks,
> Kenneth
| 
XML Sitemap