|
Posted by S. Pidgorny on July 16, 2005, 9:35 pm
Please log in for more thread options
Jaye,
This is a common sense thing: install root CA, sign the subordinate CA key,
backup, turn off, lock forever. Then use the subordinate CA to do the job.
Any difficulties - ask back in the newsgroup
--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-
> Hello,
>
> I am implementing a Windows Server 2003 2-Tier CA environment but am
having
> trouble finding good documentation on how to do it. I would like to be
able
> to set this all up without having to become a CA expert! I downloaded
> several documents from Microsoft, including their Best Practices document.
> The Best Practices looks good but it only explains a 3-Tier environment.
It
> will say things in it about "You don't need this step for a 1-Tier" but it
> says nothing about 2-Tiers. With that document, do I just combine the
> Offline Root and Offline Intermediate Servers in to one and follow the
same
> directions only on one server? Is there another source out there that
> anyone knows of for 2-Tiers?
>
> Thank you,
>
> ~Jaye
>
>
|