redundant enterprise CA

redundant enterprise CA
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
redundant enterprise CA slimard@gmail.com 01-09-2008
Posted by slimard@gmail.com on January 9, 2008, 10:41 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

I am going to deploy a 2-tiers Windows 2003 PKI. I will set-up a stand-
alone CA and 2 Enterprise CA.

The 2 Enterprise CA are for redundancy. Is there anything special to
make them redundant?

Thank you
Slimo

Posted by Brian Komar on January 9, 2008, 11:39 am
If you were  Registered and logged in, you could reply and use other advanced thread options
There is no clustering support for Server 2003. The redundancy is
accomplished by ensuring that both have the *same* certificate templates
available for enrollment, so that clients can request certificates from
*either* CA.

Brian


> Hello,
>
> I am going to deploy a 2-tiers Windows 2003 PKI. I will set-up a stand-
> alone CA and 2 Enterprise CA.
>
> The 2 Enterprise CA are for redundancy. Is there anything special to
> make them redundant?
>
> Thank you
> Slimo


Posted by slimard@gmail.com on January 10, 2008, 9:25 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Is then the redundancy done through AD because they will both
Enterprise CA?

wrote:
> There is no clustering support for Server 2003. The redundancy is
> accomplished by ensuring that both have the *same* certificate templates
> available for enrollment, so that clients can request certificates from
> *either* CA.
>
> Brian
>
>
>
>
>
> > Hello,
>
> > I am going to deploy a 2-tiers Windows 2003 PKI. I will set-up a stand-
> > alone CA and 2 Enterprise CA.
>
> > The 2 Enterprise CA are for redundancy. Is there anything special to
> > make them redundant?
>
> > Thank you
> > Slimo- Hide quoted text -
>
> - Show quoted text -


Posted by Brian Komar on January 10, 2008, 10:00 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Pretty much.
Client queries the Enrollment Services container in the Configuration
context and is sent to any available CAs for the requested certificate
template.
Brian

Is then the redundancy done through AD because they will both
Enterprise CA?

wrote:
> There is no clustering support for Server 2003. The redundancy is
> accomplished by ensuring that both have the *same* certificate templates
> available for enrollment, so that clients can request certificates from
> *either* CA.
>
> Brian
>
>
>
>
>
> > Hello,
>
> > I am going to deploy a 2-tiers Windows 2003 PKI. I will set-up a stand-
> > alone CA and 2 Enterprise CA.
>
> > The 2 Enterprise CA are for redundancy. Is there anything special to
> > make them redundant?
>
> > Thank you
> > Slimo- Hide quoted text -
>
> - Show quoted text -


Similar ThreadsPosted
redundant wan February 11, 2008, 10:23 am
Upgrading to Windows 2003 Enterprise Edition Enterprise CA October 18, 2005, 4:59 am
Enterprise PKI. May 5, 2006, 1:50 pm
Enterprise CA May 31, 2006, 11:29 am
need to remove old Enterprise CA - April 14, 2006, 4:26 pm
Standalone/ Enterprise CA issue October 18, 2005, 2:52 am
ZeroSpyware Enterprise Evaluation March 22, 2006, 3:44 am
Can Enterprise Root CA be moved? October 23, 2006, 10:50 am
question about removing enterprise CA February 6, 2007, 3:08 pm
Stand-alone vs Enterprise subordinate CA? March 9, 2007, 12:23 pm

The site map in XML format XML site map

Contact Us | Privacy Policy