Windows 2003 Certificate Authority Question

[Guest Andy H]

Hi

 

I have setup a Windows 2003 Enterprise Certificate Authority, this is

installed on one of two domain controllers. Although there is an Active

Directory domain, the is going to be no AD integration, no auto enrolment and

the user accounts will not be stored in the active directory that the

certificates will be used for.

 

I have setup the Certificate Authority and IIS to publish the CRL on the

same AD server, if this server falls over though we loose the CRL. Is there

a way I can publish the same CRL across two servers using IIS?

 

Or can you integrate the Certificate Authority to share the CRL with Active

Directory across the two domain controllers? Even though the CA is not using

auto enrolment or any user accounts used in Active Directory?

 

I have setup the CA and CRL on one of my Domain Controllers, and now just

want to configure the CRL in a redundant environment if possible?

 

Any help would be great?

 

I am new Certificate Authority’s.

 

Thanks in advance.