|
Posted by =?Utf-8?B?V29uZyBUdWNrIFdhaA== on September 5, 2005, 10:29 am
If you were Registered and logged in, you could reply and use other advanced thread options
pls see in-line.
> 1. Should (or can) the offline root be a stand alone root CA, or should I
> install it as an enterprise offline root CA?
The root CA be used installed as either SA or Ent. But it is prefered to be
a standalone.
> 2. If I can (and do) install it as an enterprise offline root CA would it be
> on a member server or a Domain controller? (if on a DC how will the domain
> cope with a DC being offline?)
It is never recommended to be installed on a DC, except in a testing ot
training environment. If you bring down your DC, the AD replication will
experience problem with other DCs in the replication ring. So don't ever do
it.
> 3. Can the offline CA be installed on a Virtual Server?
Yes, no problem at all, as long as the guest OS is able to communicate with
the network.
HTH.
|