• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1276
  • Last Modified:

Certificates from Enterprise Root CA from parent domain to clients in child domain.

Can we issue certificates from Enterprise Root CA which is in parent domain to clients in child domain?

Currently, we have Enterprise Root CA installed in child domain xyz.abc.com. We want to remove this CA and set up a CA in the parent domain abc.com to issue certificates for both parent and child domain.

What is the best practice?

1 Solution
It is possible yes (http://support.microsoft.com/kb/281271), but from a security and flexibility standpoint I would probably install an offline Root CA in the forest root domain, and a subordinate issuing CA in the child domain.

imranrftAuthor Commented:
Thanks man!!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now