|
Posted by Brian Komar [MVP] on October 22, 2006, 5:51 pm
Please log in for more thread options g18c@hotmail.com says...
> Hi, i have 2 domain controllers and a need for a RADIUS authenticated
> wifi extension of our intranet.
>
> As i understand it, to get good security i should use RADIUS and
> certificates. However i will require a certificate server. I have read
> about having a standalone root certificate server but this would mean
> buying new kit. Is it ok to run my root CA on one of my servers? Can i
> just use a not-so-good computer as my root CA, backup the certificate
> and take it offline?
>
> Any pointers much appreciated.
>
> Cheers,
>
> Chris
>
>
If at all possible, do not put the root CA on the same computer as a
domain controller. Once installed, you cannot move the CA to a computer
with a different name, nor can you rename the computer once Certificate
Services is installed.
Too many customers forget this when they install CAs on domain
controllers and then wish to move Certificate Services at a later date.
Brian
| 
XML Sitemap