autoenroll DC certificate forest-wide

Discussion in 'Server Security' started by booster, Jun 8, 2009.

  1. booster

    booster Guest

    We have the folowing scenario: 1 Forest with an forest root domain called
    acme.com
    There are multiple domains in the forest: europe.acme.com, apac.acme.com,
    us.acme.com

    we have built an offline CA.

    we are planning to place the online issuing CA (an enterprise subordinate)
    in the europe.acme.com
    a) what steps are required to auto enroll certificates in the forest?
    or is it better to place the Online issuing CA in the root domain, do use
    better auto-enrollment features ?

    thanks!
     
    booster, Jun 8, 2009
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.