Enterprise root CA recommendation

[zooshan]

Hi guys,I am fairly new to PKI so have some basic question about enterprise two tier PKI .Let's say we have root server, which is not the member of domain and normally stay powered down until we need to renew intermediate CA certificate.Does Microsoft recommend root server as virtual machine or we can simply have root server on a CD, whenever we need to bring up root server we just pop in CD and boot the root server? So basically is there any well established recommended from Microsoft in favor of root server on CD versus a separate root server VM?Thanks!!

Continue reading...