Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Creating an Enterprise Sub CA

Posted on 2012-04-05
1
290 Views
Last Modified: 2012-04-12
I created an offline root CA and now plan on creating a Sub CA to issue certificates to users and computers. I am in a 2003 and 2008 Active Directory domain. I would like to install IIS on the Sub CA so users can request certificates through web enrollment.

That question I have is, can I create an Enterprise Sub CA on a member server or does it have to be created on a DC?
0
Comment
Question by:AGenMIS
1 Comment
 
LVL 8

Accepted Solution

by:
Shmoid earned 500 total points
ID: 37814437
Yes you can install the subCA on a member server. In fact, that is preferable. It is not best practice to install the CA role on a DC.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question