Click here to get back home

Virtualized Certificate Authority Services

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Virtualized Certificate Authority Services Sam 05-20-2008
Posted by Sam on May 20, 2008, 3:19 pm
Please log in for more thread options
I am in the process of defining the CA architecture needs for my company. We
are a single forest/domain so pretty simple and basic. Always looking to
reduce capital costs, I was wondering if anyone has virtualized their entire
CA infrastructure?
My plan was to have a Virtual root, and filing the vmdk files in a safe
location and then having 1 physical Enterprise, and 3 subordinates. I'd like
to do all 4 intermediate and subordinates as Virtual servers rather than
physical.

Anyone experience any issues or even tried this?


Posted by Brian Komar \(MVP\) on May 20, 2008, 6:03 pm
Please log in for more thread options
It can be done, but I would not do it without HSMs
You can use a network attached HSM to protect the virtualized servers
Also, VMWare is not officially supported for virtualized CAs.
Virtual Server R2 is supported
Brian

>I am in the process of defining the CA architecture needs for my company.
>We
> are a single forest/domain so pretty simple and basic. Always looking to
> reduce capital costs, I was wondering if anyone has virtualized their
> entire
> CA infrastructure?
> My plan was to have a Virtual root, and filing the vmdk files in a safe
> location and then having 1 physical Enterprise, and 3 subordinates. I'd
> like
> to do all 4 intermediate and subordinates as Virtual servers rather than
> physical.
>
> Anyone experience any issues or even tried this?
>


Similar ThreadsPosted
Create Certificate Request for Windows2003 certificate authority without using website March 22, 2006, 8:07 am
Root Certificate Authority October 22, 2006, 6:35 am
PEM file with certificate authority? February 6, 2007, 10:56 am
Re: Rendom and certificate authority on DC June 5, 2007, 11:25 am
Searching Certificate Authority September 17, 2007, 6:02 pm
Clustering Certificate Authority Server November 21, 2005, 5:27 am
Certificate Authority backup failed. November 27, 2005, 6:41 pm
How to tell if Certificate Authority is root, stand-alone or? February 8, 2007, 10:27 am
Signing an OpenSSL CSR with Microsoft Certificate Authority July 24, 2005, 10:33 am
Certificate Authority Newbie Installation query July 10, 2006, 10:54 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap