Guest nowandever29 Posted January 7, 2008 Posted January 7, 2008 Hello, We've got a parent and several child domains running Windows 2003 native mode. We have a 2003 enteprise root certificate authority in the parent, is it possible for me to create a subordinate enterprise certificate authority in one of the child domains?
Guest James McIllece [MS] Posted January 7, 2008 Posted January 7, 2008 Re: Possible to create ent sub CA in child domain? =?Utf-8?B?bm93YW5kZXZlcjI5?= <nowandever29@discussions.microsoft.com> wrote in news:ECF5BA21-3D57-49E3-B6CD-0A532ADACEA2@microsoft.com: > Hello, > > We've got a parent and several child domains running Windows 2003 > native mode. We have a 2003 enteprise root certificate authority in > the parent, is it possible for me to create a subordinate enterprise > certificate authority in one of the child domains? > > Yes, you can do that. -- James McIllece, Microsoft Please do not send email directly to this alias. This is my online account name for newsgroup participation only. This posting is provided "AS IS" with no warranties, and confers no rights.
Guest James McIllece [MS] Posted January 7, 2008 Posted January 7, 2008 Re: Possible to create ent sub CA in child domain? "James McIllece [MS]" <jamesmci@online.microsoft.com> wrote in news:Xns9A1E8541090E6jamesmcionlinemicros@207.46.248.16: > =?Utf-8?B?bm93YW5kZXZlcjI5?= <nowandever29@discussions.microsoft.com> > wrote in news:ECF5BA21-3D57-49E3-B6CD-0A532ADACEA2@microsoft.com: > >> Hello, >> >> We've got a parent and several child domains running Windows 2003 >> native mode. We have a 2003 enteprise root certificate authority in >> the parent, is it possible for me to create a subordinate enterprise >> certificate authority in one of the child domains? >> >> > > Yes, you can do that. > Here is some additional information from the Certificate Services team: "Technically, since an enterprise CA is capable of serving the entire forest, its domain membership...is largely irrelevant. There are some things you will want to think about, such as cert publishers group membership, but otherwise, it really doesn't matter much. -- James McIllece, Microsoft Please do not send email directly to this alias. This is my online account name for newsgroup participation only. This posting is provided "AS IS" with no warranties, and confers no rights.
Recommended Posts